SUSE-SU-2026:4937-1

    Dashboard / Vulnerabilities / SUSE-SU-2026:4937-1

    SUSE-SU-2026:4937-1

    Published: 29 Oct 2026Last Modified: 31 Oct 2026

    Summary: Security update for the Linux Kernel

    Details: The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). - CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

    References: https://www.suse.com/support/update/announcement/2026/suse-su-20264937-1/, https://bugzilla.suse.com/1227103, https://bugzilla.suse.com/1275510, https://bugzilla.suse.com/1275564, https://bugzilla.suse.com/1276951, https://bugzilla.suse.com/1277357, https://bugzilla.suse.com/1277599, https://bugzilla.suse.com/1277821, https://bugzilla.suse.com/1280176, https://bugzilla.suse.com/1280251, https://bugzilla.suse.com/1280259, https://bugzilla.suse.com/1280387, https://bugzilla.suse.com/1280743, https://bugzilla.suse.com/1281280, https://bugzilla.suse.com/1281397, https://bugzilla.suse.com/1283835, https://bugzilla.suse.com/1283851, https://bugzilla.suse.com/1283894, https://bugzilla.suse.com/1283946, https://bugzilla.suse.com/1283963, https://bugzilla.suse.com/1284064, https://bugzilla.suse.com/1284408, https://bugzilla.suse.com/1284518, https://bugzilla.suse.com/1284713, https://bugzilla.suse.com/1284746, https://bugzilla.suse.com/1284790, https://bugzilla.suse.com/1284791, https://bugzilla.suse.com/1285684, https://bugzilla.suse.com/1285685, https://www.suse.com/security/cve/CVE-2024-39468, https://www.suse.com/security/cve/CVE-2026-72041, https://www.suse.com/security/cve/CVE-2026-72110, https://www.suse.com/security/cve/CVE-2026-72493, https://www.suse.com/security/cve/CVE-2026-74578, https://www.suse.com/security/cve/CVE-2026-74587, https://www.suse.com/security/cve/CVE-2026-74624, https://www.suse.com/security/cve/CVE-2026-80977, https://www.suse.com/security/cve/CVE-2026-89528, https://www.suse.com/security/cve/CVE-2026-89542, https://www.suse.com/security/cve/CVE-2026-89669, https://www.suse.com/security/cve/CVE-2026-90011, https://www.suse.com/security/cve/CVE-2026-90088, https://www.suse.com/security/cve/CVE-2026-97555, https://www.suse.com/security/cve/CVE-2026-97564, https://www.suse.com/security/cve/CVE-2026-98015, https://www.suse.com/security/cve/CVE-2026-98016, https://www.suse.com/security/cve/CVE-2026-98041, https://www.suse.com/security/cve/CVE-2026-98130, https://www.suse.com/security/cve/CVE-2026-98248, https://www.suse.com/security/cve/CVE-2026-98253, https://www.suse.com/security/cve/CVE-2026-98260, https://www.suse.com/security/cve/CVE-2026-98323, https://www.suse.com/security/cve/CVE-2026-98357, https://www.suse.com/security/cve/CVE-2026-98359, https://www.suse.com/security/cve/CVE-2026-98432, https://www.suse.com/security/cve/CVE-2026-99999

    Affected packages

    Package

    Name: kernel-default

    Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -5.14.21-150400.24.246.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2026:4937-1 | CVE-DB