The SUSE Linux Enterprise Kernel 4.12.14-122.280 update (Live Patch 74) fixes seven security vulnerabilities: CVE-2026-31685 addresses rejection of invalid MAC headers in netfilter ip6t_eui64; CVE-2026-43025 mitigates improper handling of explicit helpers in netfilter ctnetlink; CVE-2026-43037 corrects clearing of skb2->cb[] in ip6_tunnel error handling; CVE-2026-43190 ensures proper length checks in netfilter xt_tcpmss; CVE-2026-43437 fixes a use-after-free in ALSA pcm linked stream runtime; CVE-2026-45970 resolves a use-after-free in bonding alb during bond state changes; and CVE-2026-46243 prevents acceptance of userspace cifs.spnego descriptions in the SMB client. These fixes collectively improve kernel security by addressing memory safety and input validation issues.

The vulnerabilities fixed by this update could lead to kernel-level memory corruption (use-after-free), improper packet processing, and acceptance of potentially malicious user-space input. These issues may affect system stability and security, potentially allowing attackers to cause denial of service or escalate privileges if exploited. However, no known exploits in the wild have been reported at this time.

An official security update (Live Patch 74) for SUSE Linux Enterprise Kernel 4.12.14-122.280 is available that addresses these vulnerabilities. Users should apply this update promptly to mitigate the risks. Since this is a kernel live patch, it can be applied without rebooting the system. No additional mitigations are indicated by the vendor advisory.