SUSE-SU-2026:5084-1: Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues:
The following security issues were fixed:
- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). - CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
Other sources
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf->len to avoid underflow (bsc#1280728). CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget (bsc#1280285). CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-livepatch-SLE15-SP4_Update_59to a version that resolves this vulnerability.Fixed in 2-150400.2.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_14_21-150400_24_240-default-2-150400.2.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_14_21-150400_24_240-default-debuginfo-2-150400.2.1 - Upgrade
Upgrade
SUSE Linux Enterprise Kernelto a version that resolves this vulnerability.Fixed in 5.14.21-150400.24.240 - Upgrade
Upgrade
SUSE Linux Enterprise Live Patching 15-SP4to a version that resolves this vulnerability.Patch Live Patch 59 - Upgrade
Upgrade
openSUSE Leap 15.4to a version that resolves this vulnerability.Patch SUSE-2026-5084 - Upgrade
Upgrade
SUSE Linux Enterprise Live Patching 15-SP4to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-5084
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which systems are in scope for this update?
The update applies to SUSE Linux Enterprise Live Patching 15-SP4 and openSUSE Leap 15.4 on ppc64le, s390x, and x86_64. It is delivered as kernel live patch update 59 for the SUSE Linux Enterprise 15 SP4 kernel 5.14.21-150400.24.240.
Which kernel subsystems are implicated?
The fixes affect SCTP, SUNRPC, NFS server (nfsd), and IPv4 code. Systems using the corresponding networking or NFS server functionality are the directly relevant exposure areas identified by the update.