SUSE-SU-2026:20898-1: kernel-livepatch-MICRO-6-0-RT_Update_12&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:20898-1 is a vulnerability in kernel-livepatch-MICRO-6-0-RT_Update_12&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 24-03-2026
   PublishedVulnerability first disclosed.
2. 31-03-2026
   Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed (bsc#1257669). - CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255895). - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).

No weakness data has been published for this record.