This SUSE Linux Enterprise Kernel update addresses multiple security vulnerabilities affecting various kernel components including virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The update fixes issues such as use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, and error path bugs. These vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-53381 to CVE-2026-98432. The update is part of Live Patch 19 for SUSE Linux Enterprise 15 SP7.

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 addresses multiple vulnerabilities affecting various kernel components including virtiofs, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues such as use-after-free, buffer overruns, stale pointers, overflow conditions, and error path bugs. These vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-53381 to CVE-2026-98432. The update is classified as high severity and aims to improve kernel security and stability.

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 addresses multiple vulnerabilities across various kernel components, including virtiofs, netfs, xfrm, ASoC SOF ipc3-control, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues such as use-after-free, buffer overflows, overflow checks, and memory underflow errors. No specific affected versions are detailed, but the update is for SUSE Linux Enterprise 15 SP6. No public exploits or in-the-wild exploitation have been reported.

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 addresses multiple security vulnerabilities affecting various kernel components, including virtiofs, IPv6, netfs, xfrm, ASoC SOF, SCTP, IPVS, SUNRPC, NFSd, and IPv4. The fixes resolve issues such as use-after-free, infinite loops, buffer overruns, heap overflows, and other memory handling errors.

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues including use-after-free, buffer overruns, stale pointers, overflow conditions, and error path bugs. These vulnerabilities were identified by their CVE identifiers and have been remediated in this update.

Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, ipv6, netfs, xfrm, ASoC SOF ipc3-control, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues including use-after-free, infinite loops, buffer overruns, heap overflow, overflow conditions, error path bugs, and memory underflow conditions.

Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

A security update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 addresses multiple vulnerabilities including use-after-free, infinite loop, buffer overrun, and other memory handling issues across various kernel components such as virtiofs, IPv6, netfs, xfrm, SCTP, IPVS, SUNRPC, NFS, and IPv4. These fixes resolve high-severity security issues that could impact system stability and security.

Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 addresses multiple security vulnerabilities affecting various kernel components including virtiofs, ipv6, netfs, xfrm, ASoC SOF, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues such as use-after-free, infinite loops, buffer overruns, heap overflows, and other memory handling errors.

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This SUSE Linux Enterprise Kernel update (Live Patch 24 for version 6.0) addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, IPv6, netfs, xfrm, ASoC SOF, SCTP, IPVS, SUNRPC, NFS, and IPv4. The update fixes issues including use-after-free, infinite loops, buffer overruns, heap overflows, and other memory handling errors.

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues including use-after-free, buffer overruns, stale pointers, overflow conditions, error path bugs, and memory underflow conditions. These vulnerabilities collectively pose a high severity risk to affected systems.

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

This SUSE Linux Enterprise Kernel update (Live Patch 27 for version 6.4.0-50.2) addresses multiple security vulnerabilities affecting various kernel components including virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The fixes resolve issues such as use-after-free, infinite loops, buffer overruns, transport count overflow, and memory underflow errors.

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

This SUSE Linux Enterprise Kernel update (Live Patch 25 for version 6.0) addresses multiple security vulnerabilities affecting various kernel components including virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The fixes resolve issues such as use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, and length calculation errors.

Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, IPv6, netfs, xfrm, SCTP, IPVS, SUNRPC, NFS, and IPv4 networking. The fixes resolve issues including use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, error path bugs, and underflow errors.

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The fixes resolve issues including use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, error path bugs, and memory underflow. These vulnerabilities collectively pose a high severity risk and are mitigated by applying this update.

Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 addresses multiple security vulnerabilities affecting various kernel components including virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The fixes resolve issues such as use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, and underflow errors. These vulnerabilities have been assigned CVE identifiers and are considered high severity. No specific affected versions are listed beyond the kernel version receiving the update.

Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

This security update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 addresses multiple security vulnerabilities affecting various kernel components including virtiofs, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues such as use-after-free, buffer overruns, stale pointers, overflow conditions, error path bugs, and length calculation errors. These vulnerabilities collectively pose a high severity risk to affected systems.

Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

In the Linux kernel, the following vulnerability has been resolved:

virtiofs: fix UAF on submount umount

iput() called from fuse_release_end() can Oops if the super block has
already been destroyed.  Normally this is prevented by waiting for
num_waiting to go down to zero before commencing with super block shutdown.

This only works, however, for the last submount instance, as the wait
counter is per connection, not per superblock.

Revert to using synchronous release requests for the auto_submounts case,
which is virtiofs only at this time.

CVE-2026-53381: virtiofs: fix UAF on submount umount in Linux kernel

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux

linux-allwinner-5.19

linux-aws

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm

linux-ibm-6.8

linux-intel-iot-realtime

linux-intel-iotg

linux-kvm

linux-lowlatency

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-nvidia-tegra

linux-nvidia-tegra-igx

linux-oem-5.17

A use-after-free (UAF) vulnerability in the Linux kernel's virtiofs subsystem was resolved. The issue occurs during submount unmount operations where iput() is called from fuse_release_end(), potentially causing a kernel Oops if the superblock has already been destroyed. This happens because the wait counter is per connection, not per superblock, allowing premature shutdown of the superblock. The fix reverts to synchronous release requests for auto_submounts, currently only affecting virtiofs. The vulnerability affects multiple Linux kernel versions and has a CVSS score of 7.8.

CVE-2026-53381 is a use-after-free (UAF) vulnerability in the Linux kernel's virtiofs component related to submount unmount operations. The issue arises because iput() called from fuse_release_end() can cause a kernel Oops if the superblock has already been destroyed. This occurs due to improper synchronization when handling multiple submount instances, as the wait counter is per connection rather than per superblock. The vulnerability has been fixed by reverting to synchronous release requests for auto_submounts, which currently affects virtiofs only.

Search: CVE-2026-53381