SUSE-SU-2026:4934-1

Dashboard / Vulnerabilities / SUSE-SU-2026:4934-1

SUSE-SU-2026:4934-1

Summary: Security update for the Linux Kernel

Details: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-97945: replace with mainline version and update References (bsc#1283144). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes). - Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes). - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes). - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). - PCI: hv: Probe vPCI buses asynchronously (git-fixes). - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). - tools/hv: fix typo 'retrive' in comment (git-fixes).

References: https://www.suse.com/support/update/announcement/2026/suse-su-20264934-1/, https://bugzilla.suse.com/1257631, https://bugzilla.suse.com/1275510, https://bugzilla.suse.com/1275564, https://bugzilla.suse.com/1276951, https://bugzilla.suse.com/1277599, https://bugzilla.suse.com/1277804, https://bugzilla.suse.com/1277821, https://bugzilla.suse.com/1280251, https://bugzilla.suse.com/1280259, https://bugzilla.suse.com/1280743, https://bugzilla.suse.com/1281280, https://bugzilla.suse.com/1281819, https://bugzilla.suse.com/1282932, https://bugzilla.suse.com/1283144, https://bugzilla.suse.com/1283835, https://bugzilla.suse.com/1283851, https://bugzilla.suse.com/1283894, https://bugzilla.suse.com/1283946, https://bugzilla.suse.com/1283963, https://bugzilla.suse.com/1284408, https://bugzilla.suse.com/1284415, https://bugzilla.suse.com/1284518, https://bugzilla.suse.com/1284655, https://bugzilla.suse.com/1284713, https://bugzilla.suse.com/1284746, https://bugzilla.suse.com/1284790, https://bugzilla.suse.com/1284791, https://bugzilla.suse.com/1285684, https://bugzilla.suse.com/1285685, https://www.suse.com/security/cve/CVE-2025-71183, https://www.suse.com/security/cve/CVE-2026-72041, https://www.suse.com/security/cve/CVE-2026-72493, https://www.suse.com/security/cve/CVE-2026-74578, https://www.suse.com/security/cve/CVE-2026-74587, https://www.suse.com/security/cve/CVE-2026-74611, https://www.suse.com/security/cve/CVE-2026-74624, https://www.suse.com/security/cve/CVE-2026-80977, https://www.suse.com/security/cve/CVE-2026-89528, https://www.suse.com/security/cve/CVE-2026-89669, https://www.suse.com/security/cve/CVE-2026-89987, https://www.suse.com/security/cve/CVE-2026-90011, https://www.suse.com/security/cve/CVE-2026-93787, https://www.suse.com/security/cve/CVE-2026-97555, https://www.suse.com/security/cve/CVE-2026-97564, https://www.suse.com/security/cve/CVE-2026-97945, https://www.suse.com/security/cve/CVE-2026-98015, https://www.suse.com/security/cve/CVE-2026-98016, https://www.suse.com/security/cve/CVE-2026-98130, https://www.suse.com/security/cve/CVE-2026-98173, https://www.suse.com/security/cve/CVE-2026-98248, https://www.suse.com/security/cve/CVE-2026-98253, https://www.suse.com/security/cve/CVE-2026-98260, https://www.suse.com/security/cve/CVE-2026-98323, https://www.suse.com/security/cve/CVE-2026-98357, https://www.suse.com/security/cve/CVE-2026-98359, https://www.suse.com/security/cve/CVE-2026-98366, https://www.suse.com/security/cve/CVE-2026-98432, https://www.suse.com/security/cve/CVE-2026-99999