SUSE-SU-2026:5052-1: Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues:
The following security issues were fixed:
- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
Other sources
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712). CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399). CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs (bsc#1280760). CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kgraft-patch-SLE12-SP5_Update_83to a version that resolves this vulnerability.Fixed in 9-2.1 - Upgrade
Upgrade
suse/kgraft-patchto a version that resolves this vulnerability.Fixed in 4_12_14-122_310-default-9-2.1 - Upgrade
Upgrade
SUSE Linux Enterprise Live Patching 12-SP5to a version that resolves this vulnerability.Fixed in 4.12.14-122.310Patch SUSE-SLE-Live-Patching-12-SP5-2026-5052
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which deployments are covered by this update?
The update is for SUSE Linux Enterprise Live Patching 12-SP5 on ppc64le, s390x, and x86_64 systems. The listed software includes the kgraft-patch-sle12-sp5_update_83 and kgraft-patch packages.
What kernel areas are addressed by the included fixes?
The fixes cover CCP cryptography, XFRM, SCTP, IPVS, SUNRPC, NFS server functionality, and IPv4 handling. The advisory identifies eight CVEs: CVE-2026-53016, CVE-2026-68426, CVE-2026-74469, CVE-2026-74669, CVE-2026-89544, CVE-2026-89551, CVE-2026-89674, and CVE-2026-98432.