{"schemaVersion":3,"id":"SUSE-SU-2026:4639-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836).\n- CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).\n- CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n\nThe following non security issue was fixed:\n\n- Disable BATMAN in supported.conf\n- Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\n- Disable CONFIG_CAN (jsc#PED-17000)","dates":{"published":"2026-10-13T11:51:49.000Z","modified":"2026-10-14T11:15:08.088Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-docs","label":"kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-ec2","label":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-trace","label":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.223.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.223.1","eol":null,"hubHref":null}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264639-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1273290","label":"bugzilla.suse.com/1273290","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1274037","label":"bugzilla.suse.com/1274037","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1274836","label":"bugzilla.suse.com/1274836","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275535","label":"bugzilla.suse.com/1275535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275696","label":"bugzilla.suse.com/1275696","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275972","label":"bugzilla.suse.com/1275972","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275985","label":"bugzilla.suse.com/1275985","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276007","label":"bugzilla.suse.com/1276007","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276381","label":"bugzilla.suse.com/1276381","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1277493","label":"bugzilla.suse.com/1277493","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1277766","label":"bugzilla.suse.com/1277766","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1277908","label":"bugzilla.suse.com/1277908","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278191","label":"bugzilla.suse.com/1278191","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278253","label":"bugzilla.suse.com/1278253","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278310","label":"bugzilla.suse.com/1278310","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278315","label":"bugzilla.suse.com/1278315","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279619","label":"bugzilla.suse.com/1279619","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1280786","label":"bugzilla.suse.com/1280786","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1281397","label":"bugzilla.suse.com/1281397","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1281546","label":"bugzilla.suse.com/1281546","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64422","label":"www.suse.com/security/cve/CVE-2026-64422","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64580","label":"www.suse.com/security/cve/CVE-2026-64580","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68376","label":"www.suse.com/security/cve/CVE-2026-68376","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72083","label":"www.suse.com/security/cve/CVE-2026-72083","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72322","label":"www.suse.com/security/cve/CVE-2026-72322","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72323","label":"www.suse.com/security/cve/CVE-2026-72323","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72348","label":"www.suse.com/security/cve/CVE-2026-72348","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72398","label":"www.suse.com/security/cve/CVE-2026-72398","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74388","label":"www.suse.com/security/cve/CVE-2026-74388","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74556","label":"www.suse.com/security/cve/CVE-2026-74556","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74588","label":"www.suse.com/security/cve/CVE-2026-74588","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74597","label":"www.suse.com/security/cve/CVE-2026-74597","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74630","label":"www.suse.com/security/cve/CVE-2026-74630","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74641","label":"www.suse.com/security/cve/CVE-2026-74641","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74743","label":"www.suse.com/security/cve/CVE-2026-74743","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74752","label":"www.suse.com/security/cve/CVE-2026-74752","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80785","label":"www.suse.com/security/cve/CVE-2026-80785","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89479","label":"www.suse.com/security/cve/CVE-2026-89479","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90088","label":"www.suse.com/security/cve/CVE-2026-90088","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90104","label":"www.suse.com/security/cve/CVE-2026-90104","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-64422","CVE-2026-64580","CVE-2026-68376","CVE-2026-72083","CVE-2026-72322","CVE-2026-72323","CVE-2026-72348","CVE-2026-72398","CVE-2026-74388","CVE-2026-74556","CVE-2026-74588","CVE-2026-74597","CVE-2026-74630","CVE-2026-74641","CVE-2026-74743","CVE-2026-74752","CVE-2026-80785","CVE-2026-89479","CVE-2026-90088","CVE-2026-90104"],"downstream":[],"duplicates":[],"related":["CVE-2026-64422","CVE-2026-64580","CVE-2026-68376","CVE-2026-72083","CVE-2026-72322","CVE-2026-72323","CVE-2026-72348","CVE-2026-72398","CVE-2026-74388","CVE-2026-74556","CVE-2026-74588","CVE-2026-74597","CVE-2026-74630","CVE-2026-74641","CVE-2026-74743","CVE-2026-74752","CVE-2026-80785","CVE-2026-89479","CVE-2026-90088","CVE-2026-90104"]},"timeline":[{"kind":"published","date":"2026-10-13T11:51:49.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T11:15:08.088Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T07:47:00.424Z","stale":false,"partial":false}}