SUSE-SU-2026:5107-1: Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

Q: Which live-patching platforms and architectures are listed for this update?

The update lists SUSE Linux Enterprise Live Patching 15 SP4 and 15 SP6, plus openSUSE Leap 15.4 and 15.6. The listed architectures are ppc64le, s390x, and x86_64.

Q: Which kernel update baselines contain the fix?

The advisory identifies SUSE Linux Enterprise Kernel 5.14.21-150400.24.243 and 6.4.0-150600.23.138 as containing the fix.

Q: Does the advisory list issues beyond the IPv4 RCU-related vulnerability?

No. The advisory states that each referenced kernel update fixes one security issue, CVE-2026-98432.

Published Nov 4, 2026

Updated

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.243 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

Other sources

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue:

The following security issue was fixed:

- CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period (bsc#1285686).

— OSV

Affected Software

14 affected componentsFixes available

suse/kernel-livepatch-sle15-sp4_update_60<2-150400.2.1

2-150400.2.1

suse/kernel-livepatch-sle15-sp6_update_32<2-150600.2.1

2-150600.2.1

All of the following

SUSE SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<5_14_21-150400_24_243-default-2-150400.2.1

5_14_21-150400_24_243-default-2-150400.2.1

suse/kernel-livepatch<5_14_21-150400_24_243-default-debuginfo-2-150400.2.1

5_14_21-150400_24_243-default-debuginfo-2-150400.2.1

All of the following

SUSE openSUSE Leap 15.4 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<5_14_21-150400_24_243-default-2-150400.2.1

5_14_21-150400_24_243-default-2-150400.2.1

suse/kernel-livepatch<5_14_21-150400_24_243-default-debuginfo-2-150400.2.1

5_14_21-150400_24_243-default-debuginfo-2-150400.2.1

All of the following

SUSE SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<6_4_0-150600_23_138-default-debuginfo-2-150600.2.1

6_4_0-150600_23_138-default-debuginfo-2-150600.2.1

suse/kernel-livepatch<6_4_0-150600_23_138-default-2-150600.2.1

6_4_0-150600_23_138-default-2-150600.2.1

All of the following

SUSE openSUSE Leap 15.6 (ppc64le s390x x86_64)

Any of the following

suse/kernel-livepatch<6_4_0-150600_23_138-default-debuginfo-2-150600.2.1

6_4_0-150600_23_138-default-debuginfo-2-150600.2.1

suse/kernel-livepatch<6_4_0-150600_23_138-default-2-150600.2.1

6_4_0-150600_23_138-default-2-150600.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/kernel-livepatch-SLE15-SP4_Update_60 to a version that resolves this vulnerability.
Fixed in 2-150400.2.1
Upgrade
Upgrade suse/kernel-livepatch-SLE15-SP6_Update_32 to a version that resolves this vulnerability.
Fixed in 2-150600.2.1
Upgrade
Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.
Fixed in 5_14_21-150400_24_243-default-2-150400.2.1
Upgrade
Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.
Fixed in 5_14_21-150400_24_243-default-debuginfo-2-150400.2.1
Upgrade
Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.
Fixed in 6_4_0-150600_23_138-default-debuginfo-2-150600.2.1
Upgrade
Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.
Fixed in 6_4_0-150600_23_138-default-2-150600.2.1
Upgrade
Upgrade SUSE Linux Enterprise Kernel to a version that resolves this vulnerability.
Fixed in 5.14.21-150400.24.243
Upgrade
Upgrade SUSE Linux Enterprise Kernel to a version that resolves this vulnerability.
Fixed in 6.4.0-150600.23.138
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2026-5107
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2026-5108
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-5108
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-5107

Event History

Nov 4, 2026

Advisory Published

via OSV·08:43 PM

Data Sourced

via OSV·08:43 PM

DescriptionAffected Software

Advisory Published

via SUSE·10:07 PM

Data Sourced

via SUSE·10:07 PM

RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-98432

Frequently Asked Questions

Which live-patching platforms and architectures are listed for this update?

The update lists SUSE Linux Enterprise Live Patching 15 SP4 and 15 SP6, plus openSUSE Leap 15.4 and 15.6. The listed architectures are ppc64le, s390x, and x86_64.

Which kernel update baselines contain the fix?

The advisory identifies SUSE Linux Enterprise Kernel 5.14.21-150400.24.243 and 6.4.0-150600.23.138 as containing the fix.

Does the advisory list issues beyond the IPv4 RCU-related vulnerability?

No. The advisory states that each referenced kernel update fixes one security issue, CVE-2026-98432.

SUSE-SU-2026:5107-1: Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which live-patching platforms and architectures are listed for this update?

Which kernel update baselines contain the fix?

Does the advisory list issues beyond the IPv4 RCU-related vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which live-patching platforms and architectures are listed for this update?

Which kernel update baselines contain the fix?

Does the advisory list issues beyond the IPv4 RCU-related vulnerability?