Security update for the Linux Kernel

Announcement ID:	SUSE-SU-2026:3616-1
Release Date:	2026-08-13T18:04:00Z
Rating:	important
References:	bsc#1185845 bsc#1237888 bsc#1243603 bsc#1254767 bsc#1255616 bsc#1258718 bsc#1262573 bsc#1263718 bsc#1263788 bsc#1264013 bsc#1264076 bsc#1264089 bsc#1265308 bsc#1266238 bsc#1266850 bsc#1267384 bsc#1267435 bsc#1267494 bsc#1267596 bsc#1267656 bsc#1267715 bsc#1268029 bsc#1269172 bsc#1269174 bsc#1269181 bsc#1269188 bsc#1269289 bsc#1269577 bsc#1269731 bsc#1269773 bsc#1269986 bsc#1269988 bsc#1269993 bsc#1269997 bsc#1270257 bsc#1271526 bsc#1271825 bsc#1271899 bsc#1271904 bsc#1271908 bsc#1271912 bsc#1271964 bsc#1272176 bsc#1272180 bsc#1272207 bsc#1272242 bsc#1272263 bsc#1272268 bsc#1272607 bsc#1272678 bsc#1272694 bsc#1272855 bsc#1272865 bsc#1272904 bsc#1272907 bsc#1272918 bsc#1273004 bsc#1273035 bsc#1273097 bsc#1273231 bsc#1274072
Cross-References:	CVE-2022-4994 CVE-2023-2058 CVE-2023-53995 CVE-2025-21710 CVE-2025-54518 CVE-2026-31431 CVE-2026-31598 CVE-2026-31628 CVE-2026-31759 CVE-2026-43033 CVE-2026-46052 CVE-2026-46056 CVE-2026-46080 CVE-2026-46109 CVE-2026-46145 CVE-2026-46174 CVE-2026-46193 CVE-2026-46243 CVE-2026-46323 CVE-2026-46333 CVE-2026-52956 CVE-2026-52958 CVE-2026-52967 CVE-2026-52986 CVE-2026-53050 CVE-2026-53131 CVE-2026-53196 CVE-2026-53224 CVE-2026-53246 CVE-2026-53256 CVE-2026-53260 CVE-2026-53267 CVE-2026-53357 CVE-2026-53375 CVE-2026-53388 CVE-2026-53391 CVE-2026-53402 CVE-2026-63794 CVE-2026-63806 CVE-2026-63807 CVE-2026-63824 CVE-2026-63829 CVE-2026-63893 CVE-2026-63917 CVE-2026-63919 CVE-2026-63921 CVE-2026-63922 CVE-2026-63924 CVE-2026-63971 CVE-2026-63975 CVE-2026-63984 CVE-2026-63994 CVE-2026-64106 CVE-2026-64189 CVE-2026-64560 CVE-2026-64561 CVE-2026-64564 CVE-2026-64600
CVSS scores:	CVE-2023-2058 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2023-2058 ( NVD ): 2.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N CVE-2023-53995 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2023-53995 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-21710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-21710 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-21710 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-54518 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-54518 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVE-2025-54518 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-31598 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-31598 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-31598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-31628 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2026-31628 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2026-31628 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-31759 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-31759 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2026-31759 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-43033 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-43033 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-43033 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46052 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-46056 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46056 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-46080 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-46080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46109 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46145 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-46145 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46145 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46145 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46174 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N CVE-2026-46174 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H CVE-2026-46174 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-46193 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46193 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-46243 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-46243 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46243 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46243 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-46243 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46323 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46333 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46333 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2026-46333 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-46333 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-52956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-52956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-52958 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-52958 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2026-52967 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-52967 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2026-52986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-52986 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53050 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53050 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53050 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H CVE-2026-53196 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53196 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53196 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53196 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53224 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53224 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53224 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2026-53246 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N CVE-2026-53246 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2026-53246 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53256 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53256 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53256 ( NVD ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-53260 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-53267 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53267 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53267 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53357 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53357 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53357 ( NVD ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53375 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-53375 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H CVE-2026-53375 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-53388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-53391 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-53391 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-53402 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-53402 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2026-53402 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63806 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-63806 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2026-63806 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2026-63807 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-63807 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H CVE-2026-63807 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-63824 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63824 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63824 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63829 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63829 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2026-63829 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-63893 ( SUSE ): 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2026-63893 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-63919 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63919 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63919 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-63922 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-63924 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63924 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63975 ( SUSE ): 8.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63975 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-63975 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-63984 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63984 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-64106 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2026-64106 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2026-64106 ( NVD ): 9.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-64560 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-64560 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-64560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-64600 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVE-2026-64600 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-64600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:	SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro for Rancher 5.3 SUSE Linux Enterprise Micro for Rancher 5.4

An update that solves 58 vulnerabilities and has three security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

• CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
• CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
• CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
• CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
• CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
• CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
• CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
• CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
• CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
• CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
• CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
• CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
• CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
• CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
• CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
• CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
• CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
• CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
• CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
• CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
• CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
• CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
• CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
• CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
• CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
• CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
• CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
• CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
• CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
• CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
• CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
• CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
• CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
• CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
• CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
• CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
• CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
• CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
• CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
• CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1273004).
• CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231).
• CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).
• CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).

The following non security issues were fixed:

• hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (bsc#1271912).
• mkspec-dtb: Skip missing DTBs.
• pkspec-dtb: Fix dtb-al rename.
• posix-cpu-timers: Cleanup the firing logic (bsc#1271912).
• posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).
• posix-cpu-timers: Do not arm SIGEV_NONE timers (bsc#1271912).
• posix-cpu-timers: Handle interval timers correctly in timer_get() (bsc#1271912).
• posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (bsc#1271912).
• posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (bsc#1271912).
• posix-cpu-timers: Make k_itimer::it_active consistent (bsc#1271912).
• posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (bsc#1271912).
• posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (bsc#1271912).
• posix-cpu-timers: Simplify posix_cpu_timer_set() (bsc#1271912).
• posix-cpu-timers: Split up posix_cpu_timer_get() (bsc#1271912).
• posix-cpu-timers: Use @now instead of @val for clarity (bsc#1271912).
• posix-timers: Add proper state tracking (bsc#1271912).
• posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).
• posix-timers: Clarify posix_timer_fn() comments (bsc#1271912).
• posix-timers: Clear overrun in common_timer_set() (bsc#1271912).
• posix-timers: Consolidate signal queueing (bsc#1271912).
• posix-timers: Consolidate timer setup (bsc#1271912).
• posix-timers: Cure si_sys_private race (bsc#1271912).
• posix-timers: Document common_clock_get() correctly (bsc#1271912).
• posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).
• posix-timers: Polish coding style in a few places (bsc#1271912).
• posix-timers: Retrieve interval in common timer_settime() code (bsc#1271912).
• sctp: validate embedded address parameter length (git-fixes).
• time: Switch to hrtimer_setup() (bsc#1271912).

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Micro for Rancher 5.3
  zypper in -t patch SUSE-SLE-Micro-5.3-2026-3616=1
• SUSE Linux Enterprise Micro 5.3
  zypper in -t patch SUSE-SLE-Micro-5.3-2026-3616=1
• SUSE Linux Enterprise Micro for Rancher 5.4
  zypper in -t patch SUSE-SLE-Micro-5.4-2026-3616=1
• SUSE Linux Enterprise Micro 5.4
  zypper in -t patch SUSE-SLE-Micro-5.4-2026-3616=1

Package List:

• SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64)
  • kernel-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64)
  • kernel-rt-debuginfo-5.14.21-150400.15.181.1
  • kernel-rt-debugsource-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro for Rancher 5.3 (noarch)
  • kernel-source-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.3 (nosrc x86_64)
  • kernel-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.3 (x86_64)
  • kernel-rt-debuginfo-5.14.21-150400.15.181.1
  • kernel-rt-debugsource-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.3 (noarch)
  • kernel-source-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64)
  • kernel-rt-debuginfo-5.14.21-150400.15.181.1
  • kernel-rt-debugsource-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64)
  • kernel-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro for Rancher 5.4 (noarch)
  • kernel-source-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.4 (x86_64)
  • kernel-rt-debuginfo-5.14.21-150400.15.181.1
  • kernel-rt-debugsource-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.4 (nosrc x86_64)
  • kernel-rt-5.14.21-150400.15.181.1
• SUSE Linux Enterprise Micro 5.4 (noarch)
  • kernel-source-rt-5.14.21-150400.15.181.1

References:

• https://www.suse.com/security/cve/CVE-2022-4994.html
• https://www.suse.com/security/cve/CVE-2023-2058.html
• https://www.suse.com/security/cve/CVE-2023-53995.html
• https://www.suse.com/security/cve/CVE-2025-21710.html
• https://www.suse.com/security/cve/CVE-2025-54518.html
• https://www.suse.com/security/cve/CVE-2026-31431.html
• https://www.suse.com/security/cve/CVE-2026-31598.html
• https://www.suse.com/security/cve/CVE-2026-31628.html
• https://www.suse.com/security/cve/CVE-2026-31759.html
• https://www.suse.com/security/cve/CVE-2026-43033.html
• https://www.suse.com/security/cve/CVE-2026-46052.html
• https://www.suse.com/security/cve/CVE-2026-46056.html
• https://www.suse.com/security/cve/CVE-2026-46080.html
• https://www.suse.com/security/cve/CVE-2026-46109.html
• https://www.suse.com/security/cve/CVE-2026-46145.html
• https://www.suse.com/security/cve/CVE-2026-46174.html
• https://www.suse.com/security/cve/CVE-2026-46193.html
• https://www.suse.com/security/cve/CVE-2026-46243.html
• https://www.suse.com/security/cve/CVE-2026-46323.html
• https://www.suse.com/security/cve/CVE-2026-46333.html
• https://www.suse.com/security/cve/CVE-2026-52956.html
• https://www.suse.com/security/cve/CVE-2026-52958.html
• https://www.suse.com/security/cve/CVE-2026-52967.html
• https://www.suse.com/security/cve/CVE-2026-52986.html
• https://www.suse.com/security/cve/CVE-2026-53050.html
• https://www.suse.com/security/cve/CVE-2026-53131.html
• https://www.suse.com/security/cve/CVE-2026-53196.html
• https://www.suse.com/security/cve/CVE-2026-53224.html
• https://www.suse.com/security/cve/CVE-2026-53246.html
• https://www.suse.com/security/cve/CVE-2026-53256.html
• https://www.suse.com/security/cve/CVE-2026-53260.html
• https://www.suse.com/security/cve/CVE-2026-53267.html
• https://www.suse.com/security/cve/CVE-2026-53357.html
• https://www.suse.com/security/cve/CVE-2026-53375.html
• https://www.suse.com/security/cve/CVE-2026-53388.html
• https://www.suse.com/security/cve/CVE-2026-53391.html
• https://www.suse.com/security/cve/CVE-2026-53402.html
• https://www.suse.com/security/cve/CVE-2026-63794.html
• https://www.suse.com/security/cve/CVE-2026-63806.html
• https://www.suse.com/security/cve/CVE-2026-63807.html
• https://www.suse.com/security/cve/CVE-2026-63824.html
• https://www.suse.com/security/cve/CVE-2026-63829.html
• https://www.suse.com/security/cve/CVE-2026-63893.html
• https://www.suse.com/security/cve/CVE-2026-63917.html
• https://www.suse.com/security/cve/CVE-2026-63919.html
• https://www.suse.com/security/cve/CVE-2026-63921.html
• https://www.suse.com/security/cve/CVE-2026-63922.html
• https://www.suse.com/security/cve/CVE-2026-63924.html
• https://www.suse.com/security/cve/CVE-2026-63971.html
• https://www.suse.com/security/cve/CVE-2026-63975.html
• https://www.suse.com/security/cve/CVE-2026-63984.html
• https://www.suse.com/security/cve/CVE-2026-63994.html
• https://www.suse.com/security/cve/CVE-2026-64106.html
• https://www.suse.com/security/cve/CVE-2026-64189.html
• https://www.suse.com/security/cve/CVE-2026-64560.html
• https://www.suse.com/security/cve/CVE-2026-64561.html
• https://www.suse.com/security/cve/CVE-2026-64564.html
• https://www.suse.com/security/cve/CVE-2026-64600.html
• https://bugzilla.suse.com/show_bug.cgi?id=1185845
• https://bugzilla.suse.com/show_bug.cgi?id=1237888
• https://bugzilla.suse.com/show_bug.cgi?id=1243603
• https://bugzilla.suse.com/show_bug.cgi?id=1254767
• https://bugzilla.suse.com/show_bug.cgi?id=1255616
• https://bugzilla.suse.com/show_bug.cgi?id=1258718
• https://bugzilla.suse.com/show_bug.cgi?id=1262573
• https://bugzilla.suse.com/show_bug.cgi?id=1263718
• https://bugzilla.suse.com/show_bug.cgi?id=1263788
• https://bugzilla.suse.com/show_bug.cgi?id=1264013
• https://bugzilla.suse.com/show_bug.cgi?id=1264076
• https://bugzilla.suse.com/show_bug.cgi?id=1264089
• https://bugzilla.suse.com/show_bug.cgi?id=1265308
• https://bugzilla.suse.com/show_bug.cgi?id=1266238
• https://bugzilla.suse.com/show_bug.cgi?id=1266850
• https://bugzilla.suse.com/show_bug.cgi?id=1267384
• https://bugzilla.suse.com/show_bug.cgi?id=1267435
• https://bugzilla.suse.com/show_bug.cgi?id=1267494
• https://bugzilla.suse.com/show_bug.cgi?id=1267596
• https://bugzilla.suse.com/show_bug.cgi?id=1267656
• https://bugzilla.suse.com/show_bug.cgi?id=1267715
• https://bugzilla.suse.com/show_bug.cgi?id=1268029
• https://bugzilla.suse.com/show_bug.cgi?id=1269172
• https://bugzilla.suse.com/show_bug.cgi?id=1269174
• https://bugzilla.suse.com/show_bug.cgi?id=1269181
• https://bugzilla.suse.com/show_bug.cgi?id=1269188
• https://bugzilla.suse.com/show_bug.cgi?id=1269289
• https://bugzilla.suse.com/show_bug.cgi?id=1269577
• https://bugzilla.suse.com/show_bug.cgi?id=1269731
• https://bugzilla.suse.com/show_bug.cgi?id=1269773
• https://bugzilla.suse.com/show_bug.cgi?id=1269986
• https://bugzilla.suse.com/show_bug.cgi?id=1269988
• https://bugzilla.suse.com/show_bug.cgi?id=1269993
• https://bugzilla.suse.com/show_bug.cgi?id=1269997
• https://bugzilla.suse.com/show_bug.cgi?id=1270257
• https://bugzilla.suse.com/show_bug.cgi?id=1271526
• https://bugzilla.suse.com/show_bug.cgi?id=1271825
• https://bugzilla.suse.com/show_bug.cgi?id=1271899
• https://bugzilla.suse.com/show_bug.cgi?id=1271904
• https://bugzilla.suse.com/show_bug.cgi?id=1271908
• https://bugzilla.suse.com/show_bug.cgi?id=1271912
• https://bugzilla.suse.com/show_bug.cgi?id=1271964
• https://bugzilla.suse.com/show_bug.cgi?id=1272176
• https://bugzilla.suse.com/show_bug.cgi?id=1272180
• https://bugzilla.suse.com/show_bug.cgi?id=1272207
• https://bugzilla.suse.com/show_bug.cgi?id=1272242
• https://bugzilla.suse.com/show_bug.cgi?id=1272263
• https://bugzilla.suse.com/show_bug.cgi?id=1272268
• https://bugzilla.suse.com/show_bug.cgi?id=1272607
• https://bugzilla.suse.com/show_bug.cgi?id=1272678
• https://bugzilla.suse.com/show_bug.cgi?id=1272694
• https://bugzilla.suse.com/show_bug.cgi?id=1272855
• https://bugzilla.suse.com/show_bug.cgi?id=1272865
• https://bugzilla.suse.com/show_bug.cgi?id=1272904
• https://bugzilla.suse.com/show_bug.cgi?id=1272907
• https://bugzilla.suse.com/show_bug.cgi?id=1272918
• https://bugzilla.suse.com/show_bug.cgi?id=1273004
• https://bugzilla.suse.com/show_bug.cgi?id=1273035
• https://bugzilla.suse.com/show_bug.cgi?id=1273097
• https://bugzilla.suse.com/show_bug.cgi?id=1273231
• https://bugzilla.suse.com/show_bug.cgi?id=1274072