SUSE-SU-2026:4660-1
Security update for the Linux Kernel
Published Oct 14, 2026 · updated Oct 14, 2026
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). - CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). - CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). - CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). - CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). - CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). - CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). - CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). - CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). - CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). - CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). - CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). - CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). - CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). - CVE-20
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · OSV.dev
Detected
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). - CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bs
Oct 14, 2026 · OSV.dev
Fix available
kernel-default fixed in 6.4.0-150600.23.138.1; kernel-livepatch-SLE15-SP6_Update_32 fixed in 1-150600.13.3.1; kernel-default fixed in 6.4.0-150600.23.138.1; kernel-64kb fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-default fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-livepatch-SLE15-SP6_Update_32 fixed in 1-150600.13.3.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-64kb fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-default-base fixed in 6.4.0-150600.23.138.1.150600.12.64.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-docs fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-obs-build fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-source fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-syms fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Fix available
kernel-zfcpdump fixed in 6.4.0-150600.23.138.1
Oct 14, 2026 · OSV.dev
Updated
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). - CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bs
Affected
- SUSE:Linux Enterprise High Availability kernel-default0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Live Patching 15 S kernel-default0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Live Patching 15 S kernel-livepatch-SLE15-SP6_Update_320 → 1-150600.13.3.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-64kb0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-default0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-default-base0 → 6.4.0-150600.23.138.1.150600.12.64.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-docs0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-obs-build0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-source0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-syms0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS kernel-zfcpdump0 → 6.4.0-150600.23.138.1
- SUSE:Linux Enterprise Server for SAP App kernel-default0 → 6.4.0-150600.23.138.1