SUSE-SU-2026:22278-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 25 Jun 2026, 11:19
Last modified:30 Jun 2026, 18:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jun 2026, 11:19
Published
Vulnerability first disclosed
30 Jun 2026, 18:24
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088). - CVE-2026-31554: futex: Require sys_futex_requeue() to have identical flags (bsc#1263108). - CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902). - CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). - CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282). - net/sched: fix pedit partial COW leading to page cache (bsc#1267625).

Affected Systems

  • suse•kernel-livepatch-SLE16_Update_2&distro=SUSE Linux Micro 6.2

    < 10-160000.1.1

References (16)