SUSE-SU-2026:2994-1: kgraft-patch-SLE12-SP5_Update_80&distro=SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise

Published

Published 14-07-2026Last modified 15-07-2026

Vulnerability summary

SUSE-SU-2026:2994-1 is a vulnerability in kgraft-patch-SLE12-SP5_Update_80&distro=SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7

CVE-2026-31685 CVE-2026-43025 CVE-2026-43037 CVE-2026-43190 CVE-2026-43437 CVE-2026-45970+1 more

Timeline

14-07-2026
PublishedVulnerability first disclosed.
15-07-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253). - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849). - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127). - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).