Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
Affects SUSE Product Security Team SUSESource GCVE Database
Mentioned vulnerabilities
No CVSS score published yet
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
Apply the SUSE Linux Enterprise Kernel live patch 56 for version 5.14.21-150400.24.225 to remediate these vulnerabilities. This update provides an official fix for the issues described. No additional mitigation actions are indicated by the vendor advisory.
Description
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
Impact
These vulnerabilities could lead to potential memory corruption or concurrency issues in kernel components related to networking and virtualization. Exploitation could affect system stability or security, but no known exploits in the wild have been reported. The update mitigates these risks by correcting the underlying code defects.
Summary
The update for SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes several security issues: CVE-2026-64423 addresses improper removal of multicast groups from the hash table on device destruction in IPv4 IGMP; CVE-2026-64561 corrects the order of checks for invalid or obsolete root after making MMU pages available in KVM x86; CVE-2026-64564 prevents freeing the ASCONF's own transport during DEL-IP processing in SCTP; and CVE-2026-68138 serializes qdisc_rtab_list operations to prevent concurrency issues in network scheduling. These fixes are included in the live patch update for SUSE Linux Enterprise 15 SP4 kernel.
Weaknesses
References
- nvd.nist.gov/vuln/detail/CVE-2026-64423 (opens in a new tab)
- git.kernel.org/stable/c/2ca18df1c2611f70eb3eb487e02ae85eb703b284 (opens in a new tab)
- git.kernel.org/stable/c/412ba7def06ffe974ba9a1d862b022362c54ffa5 (opens in a new tab)
- git.kernel.org/stable/c/5f42729d74bd6c61306d864423290d92962de4e1 (opens in a new tab)
- git.kernel.org/stable/c/76d030ac95e17f91d69a595f17ebc5979700cf9a (opens in a new tab)
- git.kernel.org/stable/c/7993211bde166471dffac074dc965489f86531f8 (opens in a new tab)
- git.kernel.org/stable/c/8820b530cb2388503d7418228d03ba074bf7a03e (opens in a new tab)
- git.kernel.org/stable/c/c6cb5f8ebe1c1a78710c19f102db9fe48b9e6ba9 (opens in a new tab)
- git.kernel.org/stable/c/f91883031e5a62877a29ce139442973cbea769f1 (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4259-1.json (opens in a new tab)
- suse.com/support/update/announcement/2026/suse-su-20264259-1/ (opens in a new tab)
- bugzilla.suse.com/1273232 (opens in a new tab)
- bugzilla.suse.com/1274074 (opens in a new tab)
- bugzilla.suse.com/1274942 (opens in a new tab)
- bugzilla.suse.com/1275458 (opens in a new tab)
- suse.com/security/cve/CVE-2026-64423/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-64561/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-64564/ (opens in a new tab)
- suse.com/security/cve/CVE-2026-68138/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4383-1.json (opens in a new tab)
- suse.com/support/update/announcement/2026/suse-su-20264383-1/ (opens in a new tab)