FlawAtlas
Search the atlas
SUSE-SU-2026:0029-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786). - CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780). - CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862). - CVE-2025-40121: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (bsc#1253367). - CVE-2025-40154: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (bsc#1253431). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436). - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033) The following non-security bugs were fixed: - scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (bsc#1252267).

Exploit probability Not scored
Published January 5, 2026
Required by Not available
Last source change March 23, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Manager Proxy LTS 4.3 kernel-source
SUSE:Manager Server LTS 4.3 kernel-default
SUSE:Manager Proxy LTS 4.3 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_47
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs
SUSE:Linux Enterprise Micro 5.3 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build
SUSE:Linux Enterprise Micro 5.3 kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise Micro 5.4 kernel-default
SUSE:Manager Server LTS 4.3 kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-default
SUSE:Manager Proxy LTS 4.3 kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Micro 5.4 kernel-default-base
SUSE:Linux Enterprise High Availability Extension 15 SP4 kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default
SUSE:Manager Server LTS 4.3 kernel-syms
SUSE:Manager Server LTS 4.3 kernel-source
SUSE:Manager Server LTS 4.3 kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source
SUSE:Manager Proxy LTS 4.3 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:0029-1

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786). - CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780). - CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862). - CVE-2025-40121: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (bsc#1253367). - CVE-2025-40154: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (bsc#1253431). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436). - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033) The following non-security bugs were fixed: - scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (bsc#1252267).

View original source

05 / REFERENCES

Further evidence