SUSE-SU-2026:4933-1

    Dashboard / Vulnerabilities / SUSE-SU-2026:4933-1

    SUSE-SU-2026:4933-1

    Published: 29 Oct 2026Last Modified: 31 Oct 2026

    Summary: Security update for the Linux Kernel

    Details: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes). - ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: PM: Fix pci_power_up() (git-fixes).

    References: https://www.suse.com/support/update/announcement/2026/suse-su-20264933-1/, https://bugzilla.suse.com/1277821, https://bugzilla.suse.com/1280387, https://bugzilla.suse.com/1281280, https://bugzilla.suse.com/1285684, https://www.suse.com/security/cve/CVE-2026-74587, https://www.suse.com/security/cve/CVE-2026-89542, https://www.suse.com/security/cve/CVE-2026-90011, https://www.suse.com/security/cve/CVE-2026-99999

    Affected packages

    Package

    Name: kernel-default

    Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.0.101-108.226.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2026:4933-1 | CVE-DB