SUSE-SU-2026:4983-1: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

Q: Which deployments are explicitly covered by this update?

The listed software includes SUSE Linux Enterprise Live Patching 15 SP5 and openSUSE Leap 15.5 on ppc64le, s390x, and x86_64. The affected live-patch package names include kernel-livepatch and kernel-livepatch-sle15-sp5_update_33.

Q: Which kernel components are involved in the listed fixes?

The fixes cover CCP cryptography, XFRM, ASoC SOF IPC3 controls, SCTP, IPVS, SUNRPC, NFS server handling, and IPv4 option handling. Systems using these networking, RPC/NFS, audio, or crypto paths may warrant prioritized review.

Q: Does the advisory provide exploit prerequisites or temporary mitigations?

No. The provided advisory data does not state required attacker access, affected default configurations, exploit conditions, or compensating mitigations if the live patch cannot be applied immediately.

Published Nov 1, 2026

Updated

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues:

The following security issues were fixed:

- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). - CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get (bsc#1277679). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

Other sources

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get (bsc#1277679). CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

— SUSE

Affected Software

7 affected componentsFixes available

suse/kernel-livepatch-sle15-sp5_update_33<16-150500.2.1

16-150500.2.1

All of the following

SUSE SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<5_14_21-150500_55_130-default-16-150500.2.1

5_14_21-150500_55_130-default-16-150500.2.1

suse/kernel-livepatch<5_14_21-150500_55_130-default-debuginfo-16-150500.2.1

5_14_21-150500_55_130-default-debuginfo-16-150500.2.1

All of the following

SUSE openSUSE Leap 15.5 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<5_14_21-150500_55_130-default-16-150500.2.1

5_14_21-150500_55_130-default-16-150500.2.1

suse/kernel-livepatch<5_14_21-150500_55_130-default-debuginfo-16-150500.2.1

5_14_21-150500_55_130-default-debuginfo-16-150500.2.1

Event History

Nov 1, 2026

Advisory Published

via OSV·06:35 PM

Data Sourced

via OSV·06:35 PM

DescriptionAffected Software

Advisory Published

via SUSE·06:35 PM

Data Sourced

via SUSE·06:35 PM

RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which deployments are explicitly covered by this update?

The listed software includes SUSE Linux Enterprise Live Patching 15 SP5 and openSUSE Leap 15.5 on ppc64le, s390x, and x86_64. The affected live-patch package names include kernel-livepatch and kernel-livepatch-sle15-sp5_update_33.

Which kernel components are involved in the listed fixes?

The fixes cover CCP cryptography, XFRM, ASoC SOF IPC3 controls, SCTP, IPVS, SUNRPC, NFS server handling, and IPv4 option handling. Systems using these networking, RPC/NFS, audio, or crypto paths may warrant prioritized review.

Does the advisory provide exploit prerequisites or temporary mitigations?

No. The provided advisory data does not state required attacker access, affected default configurations, exploit conditions, or compensating mitigations if the live patch cannot be applied immediately.

SUSE-SU-2026:4983-1: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are explicitly covered by this update?

Which kernel components are involved in the listed fixes?

Does the advisory provide exploit prerequisites or temporary mitigations?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are explicitly covered by this update?

Which kernel components are involved in the listed fixes?

Does the advisory provide exploit prerequisites or temporary mitigations?