Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Zapscape) (bsc#1273232). - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942).
SUSE-SU-2026:23837-1
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:SUSE-SU-2026:23837-1
kernel-livepatch-MICRO-6-0_Update_26
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 3-1.1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3-1.1"
}
]
}
],
"package": {
"name": "kernel-livepatch-MICRO-6-0_Update_26",
"purl": "pkg:rpm/suse/kernel-livepatch-MICRO-6-0_Update_26&distro=SUSE%20Linux%20Micro%206.0",
"ecosystem": "SUSE:Linux Micro 6.0"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23837-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-livepatch-6_4_0-49-default": "3-1.1"
}
]
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #19990 · Revision 1
- Added to Heist Feed
- Publisher date