Security update for the Linux Kernel

This security update for the SUSE Linux Enterprise 15 SP5 kernel addresses a large set of vulnerabilities identified by multiple CVEs (e.g., CVE-2024-57841, CVE-2026-53260, CVE-2026-23451, CVE-2026-31502, and many others). The fixes cover a wide range of kernel subsystems including networking (tcp_conn_request memory leak), bonding (infinite loop and type confusion), team driver (header_ops type confusion), cpuidle governor, BPF program reuse, netfilter queue handling, SCTP stream state rollback, futex lockup prevention, device mapper log overflow, locking mechanisms, virtiofs use-after-free, TIPC slab use-after-free, key management, AppArmor use-after-free, SCSI target CRC and double-free issues, IPv6 extension header validation, tunnel header assumptions, netfilter synproxy refresh, NFC LLCP use-after-free, security keys RCU read section, TLS off-by-one error, DRM plane update locking, AF_UNIX queue synchronization, VSOCK use-after-free, RDMA QP publishing, crypto RSA CRT validation, BPF devmap fragmentation rejection, IPv4 IGMP multicast group removal, ALSA firmware teardown, SMC use-after-free, KVM VMCS hiding, rhashtable stale iterator clearing, fib alias freeing, GTP skb pull data checks, XFRM double-free, Btrfs device trimming, PPPoE header pointer reload, GRO double aggregation, net/sched serialization, Ceph out-of-bounds read, ALSA seq timer closure, net/iucv socket referencing, PPP channel free deferral, and others. These fixes collectively improve kernel stability and security by addressing memory corruption, race conditions, and logic errors.

The vulnerabilities fixed by this update include memory leaks, infinite loops, use-after-free conditions, out-of-bounds reads and writes, race conditions, type confusion, and other kernel-level bugs that could potentially lead to system instability, denial of service, or privilege escalation. Given the kernel-level nature of these issues, exploitation could impact system integrity and availability. However, no specific exploitation in the wild is reported. The update addresses a broad range of kernel subsystems, indicating a comprehensive security improvement.

A security update for the SUSE Linux Enterprise 15 SP5 kernel has been released that fixes these vulnerabilities. It is recommended to apply this official update promptly to mitigate the risks associated with these kernel vulnerabilities. No additional mitigation steps are indicated beyond applying the update.