Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253). - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849). - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127). - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670). - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253). - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849). - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127). - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1263670
- https://bugzilla.suse.com/1264253
- https://bugzilla.suse.com/1264849
- https://bugzilla.suse.com/1265127
- https://bugzilla.suse.com/1265197
- https://bugzilla.suse.com/1266265
- https://bugzilla.suse.com/1267206
- https://www.suse.com/security/cve/CVE-2026-31685
- https://www.suse.com/security/cve/CVE-2026-43025
- https://www.suse.com/security/cve/CVE-2026-43037
- https://www.suse.com/security/cve/CVE-2026-43190
- https://www.suse.com/security/cve/CVE-2026-43437
- https://www.suse.com/security/cve/CVE-2026-45970
- https://www.suse.com/security/cve/CVE-2026-46243
- https://www.suse.com/support/update/announcement/2026/suse-su-20263066-1/