{"id":"SUSE-SU-2026:4938-1","summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).\n- CVE-2026-72110: bpf,fork: wipe -\u003ebpf_storage before bailouts that access it (bsc#1277357).\n- CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).\n- CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).\n- CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx-\u003estate (bsc#1275564).\n- CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).\n- CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).\n- CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).\n- CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).\n- CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).\n- CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).\n- CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).\n- CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).\n- CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).\n- CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).\n- CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).\n- CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).\n- CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).\n- CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).\n- CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).\n- CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).\n- CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).\n- CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).\n\nThe following non security issue was fixed:\n\n- netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).\n","modified":"2026-10-31T18:00:04.932136119Z","published":"2026-10-29T13:39:40Z","related":["CVE-2026-72041","CVE-2026-72110","CVE-2026-72301","CVE-2026-72493","CVE-2026-74578","CVE-2026-74587","CVE-2026-74624","CVE-2026-80977","CVE-2026-89528","CVE-2026-89542","CVE-2026-89669","CVE-2026-90011","CVE-2026-90088","CVE-2026-97555","CVE-2026-97564","CVE-2026-98015","CVE-2026-98016","CVE-2026-98041","CVE-2026-98130","CVE-2026-98248","CVE-2026-98253","CVE-2026-98260","CVE-2026-98323","CVE-2026-98357","CVE-2026-98359","CVE-2026-98432","CVE-2026-99999"],"upstream":["CVE-2026-72041","CVE-2026-72110","CVE-2026-72301","CVE-2026-72493","CVE-2026-74578","CVE-2026-74587","CVE-2026-74624","CVE-2026-80977","CVE-2026-89528","CVE-2026-89542","CVE-2026-89669","CVE-2026-90011","CVE-2026-90088","CVE-2026-97555","CVE-2026-97564","CVE-2026-98015","CVE-2026-98016","CVE-2026-98041","CVE-2026-98130","CVE-2026-98248","CVE-2026-98253","CVE-2026-98260","CVE-2026-98323","CVE-2026-98357","CVE-2026-98359","CVE-2026-98432","CVE-2026-99999"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264938-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275510"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275564"},{"type":"REPORT","url":"https://bugzilla.suse.com/1276951"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277357"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277599"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277742"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277821"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280251"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280259"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280387"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280743"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281280"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281397"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283835"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283851"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283894"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283946"},{"type":"REPORT","url":"https://bugzilla.suse.com/1283963"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284064"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284408"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284713"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284746"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284790"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284791"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285684"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285685"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72110"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72301"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72493"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74578"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74587"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-74624"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-80977"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-89528"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-89542"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-89669"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90011"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-90088"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-97555"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-97564"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98015"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98016"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98130"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98248"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98253"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98260"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98357"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-98432"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-99999"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.5","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.167.2"}]}],"ecosystem_specific":{"binaries":[{"kernel-devel-rt":"5.14.21-150500.13.167.2","kernel-rt":"5.14.21-150500.13.167.2","kernel-source-rt":"5.14.21-150500.13.167.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4938-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.5","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.167.2"}]}],"ecosystem_specific":{"binaries":[{"kernel-devel-rt":"5.14.21-150500.13.167.2","kernel-rt":"5.14.21-150500.13.167.2","kernel-source-rt":"5.14.21-150500.13.167.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4938-1.json"}}],"schema_version":"1.9.2"}