Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed
- Products
- kernel-default, kernel-docs, kernel-ec2, kernel-source, kernel-syms, kernel-trace, kernel-xen
- Affected versions
- Not specified
- Fixed versions
- 3.0.101-108.223.1
- CVEs
- CVE-2026-64422, CVE-2026-64580, CVE-2026-68376, CVE-2026-72083, CVE-2026-72322, CVE-2026-72323, CVE-2026-72348, CVE-2026-72398, CVE-2026-74388, CVE-2026-74556, CVE-2026-74588, CVE-2026-74597, CVE-2026-74630, CVE-2026-74641, CVE-2026-74743, CVE-2026-74752, CVE-2026-80785, CVE-2026-89479, CVE-2026-90088, CVE-2026-90104
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 12:12 UTC · Revision 1
Source evidence
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed
osv:SUSE-SU-2026:4639-1
kernel-default
Fixed versions: 3.0.101-108.223.1
kernel-docs
Fixed versions: 3.0.101-108.223.1
kernel-ec2
Fixed versions: 3.0.101-108.223.1
kernel-source
Fixed versions: 3.0.101-108.223.1
kernel-syms
Fixed versions: 3.0.101-108.223.1
kernel-trace
Fixed versions: 3.0.101-108.223.1
kernel-xen
Fixed versions: 3.0.101-108.223.1
Complete source record
{
"id": "93421f3011996b63544665ec672be33aa4ee9abab96fde2cce0c48866b0ffa72",
"url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A4639-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Security update for the Linux Kernel",
"summary": "The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed",
"evidence": "osv:SUSE-SU-2026:4639-1",
"products": [
{
"name": {
"value": "kernel-default",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-docs",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-ec2",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-source",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-syms",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-trace",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-xen",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.101-108.223.1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "SUSE-SU-2026:4639-1",
"aliases": [
"SUSE-SU-2026:4639-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-default",
"purl": "pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-docs",
"purl": "pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-ec2",
"purl": "pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-source",
"purl": "pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-syms",
"purl": "pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-trace",
"purl": "pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.101-108.223.1"
}
]
}
],
"package": {
"name": "kernel-xen",
"purl": "pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
"ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"kernel-ec2": "3.0.101-108.223.1",
"kernel-xen": "3.0.101-108.223.1",
"kernel-docs": "3.0.101-108.223.1",
"kernel-syms": "3.0.101-108.223.1",
"kernel-trace": "3.0.101-108.223.1",
"kernel-source": "3.0.101-108.223.1",
"kernel-default": "3.0.101-108.223.1",
"kernel-ec2-base": "3.0.101-108.223.1",
"kernel-xen-base": "3.0.101-108.223.1",
"kernel-ec2-devel": "3.0.101-108.223.1",
"kernel-xen-devel": "3.0.101-108.223.1",
"kernel-trace-base": "3.0.101-108.223.1",
"kernel-trace-devel": "3.0.101-108.223.1",
"kernel-default-base": "3.0.101-108.223.1",
"kernel-default-devel": "3.0.101-108.223.1"
}
]
}
}
],
"modified": "2026-10-14T11:15:08.088415691Z",
"provider": "osv",
"upstream": [
"CVE-2026-64422",
"CVE-2026-64580",
"CVE-2026-68376",
"CVE-2026-72083",
"CVE-2026-72322",
"CVE-2026-72323",
"CVE-2026-72348",
"CVE-2026-72398",
"CVE-2026-74388",
"CVE-2026-74556",
"CVE-2026-74588",
"CVE-2026-74597",
"CVE-2026-74630",
"CVE-2026-74641",
"CVE-2026-74743",
"CVE-2026-74752",
"CVE-2026-80785",
"CVE-2026-89479",
"CVE-2026-90088",
"CVE-2026-90104"
],
"references": [
"https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/",
"https://bugzilla.suse.com/1273290",
"https://bugzilla.suse.com/1274037",
"https://bugzilla.suse.com/1274836",
"https://bugzilla.suse.com/1275535",
"https://bugzilla.suse.com/1275696",
"https://bugzilla.suse.com/1275972",
"https://bugzilla.suse.com/1275985",
"https://bugzilla.suse.com/1276007",
"https://bugzilla.suse.com/1276381",
"https://bugzilla.suse.com/1277493",
"https://bugzilla.suse.com/1277766",
"https://bugzilla.suse.com/1277908",
"https://bugzilla.suse.com/1278191",
"https://bugzilla.suse.com/1278253",
"https://bugzilla.suse.com/1278310",
"https://bugzilla.suse.com/1278315",
"https://bugzilla.suse.com/1279619",
"https://bugzilla.suse.com/1280786",
"https://bugzilla.suse.com/1281397",
"https://bugzilla.suse.com/1281546",
"https://www.suse.com/security/cve/CVE-2026-64422",
"https://www.suse.com/security/cve/CVE-2026-64580",
"https://www.suse.com/security/cve/CVE-2026-68376",
"https://www.suse.com/security/cve/CVE-2026-72083",
"https://www.suse.com/security/cve/CVE-2026-72322",
"https://www.suse.com/security/cve/CVE-2026-72323",
"https://www.suse.com/security/cve/CVE-2026-72348",
"https://www.suse.com/security/cve/CVE-2026-72398",
"https://www.suse.com/security/cve/CVE-2026-74388",
"https://www.suse.com/security/cve/CVE-2026-74556",
"https://www.suse.com/security/cve/CVE-2026-74588",
"https://www.suse.com/security/cve/CVE-2026-74597",
"https://www.suse.com/security/cve/CVE-2026-74630",
"https://www.suse.com/security/cve/CVE-2026-74641",
"https://www.suse.com/security/cve/CVE-2026-74743",
"https://www.suse.com/security/cve/CVE-2026-74752",
"https://www.suse.com/security/cve/CVE-2026-80785",
"https://www.suse.com/security/cve/CVE-2026-89479",
"https://www.suse.com/security/cve/CVE-2026-90088",
"https://www.suse.com/security/cve/CVE-2026-90104"
]
},
"related_cves": [
{
"value": "CVE-2026-64422",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64580",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68376",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72083",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72322",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72323",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72348",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72398",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74388",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74556",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74588",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74597",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74630",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74641",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74743",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74752",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80785",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89479",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90088",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90104",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 316279,
"published_at": "2026-10-13T11:51:49+00:00"
}