CriticalFix available

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

Type: advisorySource: OSV1 source record

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).

Announced 29 Sept 2026Group revision 1

Original source ↗

SUSE-SU-2026:23939-1

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:SUSE-SU-2026:23939-1

kernel-livepatch-SLE16_Update_2

Source reference: /affected/0/package/name

Affected versions: Not stated in this record
Fixed versions: 14-160000.1.1
Source reference: /affected/0/ranges
Prerequisites: Not stated in this record

kernel-livepatch-SLE16_Update_2

Source reference: /affected/1/package/name

Affected versions: Not stated in this record
Fixed versions: 14-160000.1.1
Source reference: /affected/1/ranges
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "14-160000.1.1"
          }
        ]
      }
    ],
    "package": {
      "name": "kernel-livepatch-SLE16_Update_2",
      "purl": "pkg:rpm/suse/kernel-livepatch-SLE16_Update_2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0",
      "ecosystem": "SUSE:Linux Enterprise Server 16.0"
    },
    "database_specific": {
      "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23939-1.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "kernel-livepatch-6_12_0-160000_7-default": "14-160000.1.1"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "14-160000.1.1"
          }
        ]
      }
    ],
    "package": {
      "name": "kernel-livepatch-SLE16_Update_2",
      "purl": "pkg:rpm/suse/kernel-livepatch-SLE16_Update_2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0",
      "ecosystem": "SUSE:Linux Enterprise Server for SAP applications 16.0"
    },
    "database_specific": {
      "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23939-1.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "kernel-livepatch-6_12_0-160000_7-default": "14-160000.1.1"
        }
      ]
    }
  }
]

Related CVEs: CVE-2026-46150
Source reference: /upstream
CVE-2026-53360
Source reference: /upstream
CVE-2026-64423
Source reference: /upstream
CVE-2026-64561
Source reference: /upstream
CVE-2026-64564
Source reference: /upstream
CVE-2026-68138
Source reference: /upstream