SUSE-SU-2026:24494-1: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.53.1 fixes one security issue:
The following security issue was fixed:
- CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
Other sources
This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.53.1 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-livepatch-MICRO-6-0_Update_30to a version that resolves this vulnerability.Fixed in 2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-159998_53-default-2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatch-MICROto a version that resolves this vulnerability.Fixed in 6-0_Update_30-debugsource-2-159998.1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-159998_53-default-debuginfo-2-159998.1.1 - Upgrade
Upgrade
SUSE Linux Enterprise Kernelto a version that resolves this vulnerability.Fixed in 6.4.0-159998.53.1Patch SUSE-SLE-Micro-6.0-kernel-738
Event History
Frequently Asked Questions
Which systems should prioritize this update?
Systems running the SUSE Linux Enterprise Kernel build addressed by this advisory should prioritize the update. The issue is in the IPv4 networking code and is rated high severity (7).
What is the fixed kernel update?
The advisory identifies SUSE Linux Enterprise Kernel 6.4.0-159998.53.1 as the update that fixes CVE-2026-98432.