SUSE-SU-2026:24501-1: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes various security issues:
The following security issues were fixed:
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
Other sources
This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes various security issues: The following security issues were fixed: CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-livepatch-MICRO-6-0_Update_29to a version that resolves this vulnerability.Fixed in 3-1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-52-default-debuginfo-3-1.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 6_4_0-52-default-3-1.1 - Upgrade
Upgrade
suse/kernel-livepatch-MICROto a version that resolves this vulnerability.Fixed in 6-0_Update_29-debugsource-3-1.1 - Upgrade
Upgrade
SUSE Linux Micro 6.0to a version that resolves this vulnerability.Fixed in 6.4.0-52.1Patch SUSE-SLE-Micro-6.0-kernel-739
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Does the advisory establish whether these flaws are remotely exploitable or require authentication?
No. The advisory identifies fixes in SCTP, SUNRPC, NFS server, and IPv4 code, but does not state attack vectors, authentication requirements, or exploit prerequisites for any individual CVE.
Are systems using default configurations known to be affected?
The advisory does not describe default service configurations or identify whether SCTP, SUNRPC, NFS server, or specific IPv4 functionality must be enabled. It therefore does not establish default-configuration exposure.
What should be used to determine whether a system is in scope?
The update is identified as applying to the SUSE Linux Enterprise Kernel 6.4.0-52.1. The advisory does not provide additional affected-version ranges or package identifiers for determining exposure beyond that update context.