SUSE-SU-2026:24493-1: Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.54.1 fixes one security issue:
The following security issue was fixed:
- CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
Other sources
This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.54.1 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-livepatch-MICRO-6-0_Update_31to a version that resolves this vulnerability.Fixed in 2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-159998_54-default-2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-159998_54-default-debuginfo-2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatch-MICROto a version that resolves this vulnerability.Fixed in 6-0_Update_31-debugsource-2-159998.1.1 - Upgrade
Upgrade
SUSE Linux Enterprise Kernelto a version that resolves this vulnerability.Fixed in 6.4.0-159998.54.1Patch SUSE-SLE-Micro-6.0-kernel-737
Event History
Frequently Asked Questions
Which kernel update includes the fix?
The fix is included in the SUSE Linux Enterprise Kernel update version 6.4.0-159998.54.1.
What subsystem is addressed by this update?
The update addresses IPv4 handling of inet_opt and ireq_opt, ensuring they are freed after an RCU grace period.