SUSE-SU-2026:1669-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:1669-1

HIGH7.8

Security update for the Linux Kernel

Published May 2, 2026

Modified 1 months ago

Fix available

Details

Description of the patch:

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix one security issue.

The following security issue was fixed:

CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algif_aead (bsc#1262573)

Affected Packages(38 packages)

cluster-md-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.40.1

dlm-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.40.1

gfs2-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.40.1

ocfs2-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.40.1

kernel-default-kgraft

SUSE Linux Enterprise Live Patching 12 SP5

Fixed in:

4.12.14-122.302.1

kernel-default-kgraft-devel

SUSE Linux Enterprise Live Patching 12 SP5

Fixed in:

4.12.14-122.302.1

kgraft-patch-4_12_14-122_302-default

SUSE Linux Enterprise Live Patching 12 SP5

Fixed in:

1-8.3.1

kernel-default-livepatch

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

6.4.0-150700.53.40.1

kernel-default-livepatch-devel

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

6.4.0-150700.53.40.1

kernel-livepatch-6_4_0-150700_53_40-default

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

1-150700.15.3.1

References

ADVISORY

https://bugzilla.suse.com/1262573

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-May/025831.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-31431/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261669-1/

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2026-31431

Ecosystems(10)

SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7

Timeline

PublishedMay 2, 2026

ModifiedMay 2, 2026