FlawAtlas
Search the atlas
SUSE-SU-2026:2421-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995). - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551). - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001). - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009). - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266238).

Exploit probability Not scored
Published June 16, 2026
Required by Not available
Last source change June 17, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default
SUSE:Linux Enterprise Micro 5.5 kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-syms
SUSE:Linux Enterprise Live Patching 15 SP5 kernel-default
SUSE:Linux Enterprise Micro 5.5 kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-64kb
SUSE:Linux Enterprise Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_41
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default
SUSE:Linux Enterprise Micro 5.5 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-zfcpdump
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-64kb
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:2421-1

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995). - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551). - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001). - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009). - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266238).

View original source

05 / REFERENCES

Further evidence