SUSE-SU-2026:0475-1

Advisory lineage Upstream: 25 Downstream: 0
Published: 12 Feb 2026, 11:32
Last modified:23 Mar 2026, 04:52

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Feb 2026, 11:32
Published
Vulnerability first disclosed
23 Mar 2026, 04:52
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723). - CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409). - CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623). - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612). - CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726). - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236). - CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).

Affected Systems

  • suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.2

    < 5.3.18-150300.59.235.1.150300.18.140.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.2

    < 5.3.18-150300.59.235.1

References (52)