SUSE-SU-2026:5016-1: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

Published Nov 2, 2026
·
Updated

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues:

The following security issues were fixed:

- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath() (bsc#1272521). - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter() (bsc#1272874). - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). - CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get (bsc#1277679). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

Other sources

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath() (bsc#1272521). CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter() (bsc#1272874). CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytesext put/get (bsc#1277679). CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

— SUSE

Affected Software

18 affected componentsFixes available
suse/kernel-livepatch-sle15-sp6_update_27<8-150600.2.1
8-150600.2.1
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)
Any of the following
suse/kernel-livepatch<6_4_0-150600_23_115-default-8-150600.2.1
6_4_0-150600_23_115-default-8-150600.2.1
suse/kernel-livepatch<6_4_0-150600_23_115-default-debuginfo-8-150600.2.1
6_4_0-150600_23_115-default-debuginfo-8-150600.2.1
All of the following
SUSE openSUSE Leap 15.6 (ppc64le s390x x86_64)
Any of the following
suse/kernel-livepatch<6_4_0-150600_23_115-default-8-150600.2.1
6_4_0-150600_23_115-default-8-150600.2.1
suse/kernel-livepatch<6_4_0-150600_23_115-default-debuginfo-8-150600.2.1
6_4_0-150600_23_115-default-debuginfo-8-150600.2.1
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64)
Any of the following
suse/kernel-livepatch<6_4_0-150700_53_34-default-12-150700.2.1
6_4_0-150700_53_34-default-12-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_45-default-10-150700.2.1
6_4_0-150700_53_45-default-10-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_34-default-debuginfo-12-150700.2.1
6_4_0-150700_53_34-default-debuginfo-12-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_31-default-14-150700.2.1
6_4_0-150700_53_31-default-14-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_37-default-debuginfo-12-150700.2.1
6_4_0-150700_53_37-default-debuginfo-12-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_45-default-debuginfo-10-150700.2.1
6_4_0-150700_53_45-default-debuginfo-10-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_31-default-debuginfo-14-150700.2.1
6_4_0-150700_53_31-default-debuginfo-14-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_40-default-11-150700.2.1
6_4_0-150700_53_40-default-11-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_40-default-debuginfo-11-150700.2.1
6_4_0-150700_53_40-default-debuginfo-11-150700.2.1
suse/kernel-livepatch<6_4_0-150700_53_37-default-12-150700.2.1
6_4_0-150700_53_37-default-12-150700.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade suse/kernel-livepatch-SLE15-SP6_Update_27 to a version that resolves this vulnerability.

    Fixed in 8-150600.2.1
  2. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150600_23_115-default-8-150600.2.1
  3. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150600_23_115-default-debuginfo-8-150600.2.1
  4. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_34-default-12-150700.2.1
  5. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_45-default-10-150700.2.1
  6. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_34-default-debuginfo-12-150700.2.1
  7. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_31-default-14-150700.2.1
  8. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_37-default-debuginfo-12-150700.2.1
  9. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_45-default-debuginfo-10-150700.2.1
  10. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_31-default-debuginfo-14-150700.2.1
  11. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_40-default-11-150700.2.1
  12. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_40-default-debuginfo-11-150700.2.1
  13. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 6_4_0-150700_53_37-default-12-150700.2.1
  14. Upgrade

    Upgrade SUSE Linux Enterprise Kernel 6.4.0-150600 to a version that resolves this vulnerability.

    Fixed in 6.4.0-150600.23.115
  15. Upgrade

    Upgrade SUSE Linux Enterprise Kernel 6.4.0-150700 to a version that resolves this vulnerability.

    Fixed in 6.4.0-150700.53.45
  16. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-2026-5016
  17. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-5016
  18. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-5021
  19. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-5023
  20. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-5022
  21. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-5026
  22. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-5027

Event History

Nov 2, 2026
Advisory Published
via OSV·09:04 AM
Data Sourced
via OSV·09:04 AM
DescriptionAffected Software
Advisory Published
via SUSE·12:05 PM
Data Sourced
via SUSE·12:05 PM
RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

Which systems are in scope for this live patch update?

The listed affected software includes SUSE Linux Enterprise Live Patching 15-SP6, SUSE Linux Enterprise Live Patching 15-SP7, and openSUSE Leap 15.6 on ppc64le, s390x, and x86_64. The update is identified as kernel-livepatch-sle15-sp6_update_27.

2

Does this update address a single vulnerability or multiple kernel issues?

It addresses multiple kernel security issues, including flaws in crypto CCP, virtiofs, IPv4 and IPv6 networking, SCTP, IPVS, SUNRPC, NFS server code, netfs, XFRM, and ASoC SOF. The listed fixes include use-after-free, heap-overflow, underflow, error-path, and potential infinite-loop conditions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203