{"id":"SUSE-SU-2026:4639-1","summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).\n- CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n\nThe following non security issue was fixed:\n\n- Disable BATMAN in supported.conf \n- Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\n- Disable CONFIG_CAN (jsc#PED-17000)\n","modified":"2026-10-14T11:15:08.088415691Z","published":"2026-10-13T11:51:49Z","related":["CVE-2026-64422","CVE-2026-64580","CVE-2026-68376","CVE-2026-72083","CVE-2026-72322","CVE-2026-72323","CVE-2026-72348","CVE-2026-72398","CVE-2026-74388","CVE-2026-74556","CVE-2026-74588","CVE-2026-74597","CVE-2026-74630","CVE-2026-74641","CVE-2026-74743","CVE-2026-74752","CVE-2026-80785","CVE-2026-89479","CVE-2026-90088","CVE-2026-90104"],"upstream":["CVE-2026-64422","CVE-2026-64580","CVE-2026-68376","CVE-2026-72083","CVE-2026-72322","CVE-2026-72323","CVE-2026-72348","CVE-2026-72398","CVE-2026-74388","CVE-2026-74556","CVE-2026-74588","CVE-2026-74597","CVE-2026-74630","CVE-2026-74641","CVE-2026-74743","CVE-2026-74752","CVE-2026-80785","CVE-2026-89479","CVE-2026-90088","CVE-2026-90104"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273290"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274037"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274836"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275535"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275696"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275972"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275985"},{"type":"REPORT","url":"https://bugzilla.suse.com/1276007"},{"type":"REPORT","url":"https://bugzilla.suse.com/1276381"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277493"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277766"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277908"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278191"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278253"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278310"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278315"},{"type":"REPORT","url":"https://bugzilla.suse.com/1279619"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280786"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281397"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281546"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64422"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64580"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68376"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72083"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72322"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72398"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74388"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74556"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74588"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74597"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74630"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74641"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74743"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74752"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-80785"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-89479"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90088"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90104"}],"affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-xen-base":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-default-devel":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-docs","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-trace-base":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-default-devel":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-ec2","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-ec2-devel":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-default-devel":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-trace":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1","kernel-default-devel":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-trace","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-base":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-default-devel":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}},{"package":{"name":"kernel-xen","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.223.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"3.0.101-108.223.1","kernel-xen":"3.0.101-108.223.1","kernel-ec2-devel":"3.0.101-108.223.1","kernel-default":"3.0.101-108.223.1","kernel-syms":"3.0.101-108.223.1","kernel-ec2":"3.0.101-108.223.1","kernel-trace-base":"3.0.101-108.223.1","kernel-ec2-base":"3.0.101-108.223.1","kernel-docs":"3.0.101-108.223.1","kernel-trace-devel":"3.0.101-108.223.1","kernel-xen-devel":"3.0.101-108.223.1","kernel-trace":"3.0.101-108.223.1","kernel-xen-base":"3.0.101-108.223.1","kernel-default-base":"3.0.101-108.223.1","kernel-source":"3.0.101-108.223.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"}}],"schema_version":"1.9.0"}