SUSE-SU-2026:4359-1: kernel-livepatch-SLE15-SP7_Update_18&distro=SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:4359-1 is a vulnerability in kernel-livepatch-SLE15-SP7_Update_18&distro=SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 28-09-2026PublishedVulnerability first disclosed.
- 29-09-2026Last modifiedVulnerability information updated.
Description
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- kernel-livepatch-SLE15-SP7_Update_18&distro=SUSE Linux Enterprise Live Patching 15 SP7< 4-150700.2.1
1 vendor · 1 product