SUSE-SU-2026:3766-1: kernel-livepatch-SLE15-SP4_Update_49&distro=SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise

Published

Published 24-08-2026Last modified 26-08-2026

Vulnerability summary

SUSE-SU-2026:3766-1 is a vulnerability in kernel-livepatch-SLE15-SP4_Update_49&distro=SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 18 · Downstream 0 · Related 18

CVE-2023-53995 CVE-2026-23449 CVE-2026-31629 CVE-2026-31759 CVE-2026-43077 CVE-2026-43110+12 more

Timeline

24-08-2026
PublishedVulnerability first disclosed.
26-08-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4) This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024). - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791). - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078). - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306). - CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483). - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668). - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624). - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625). - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196). - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822). - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).