SUSE-SU-2026:1840-2

Details

Description of the patch:

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix the following issue:

CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449).
CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (bsc#1264450).

Affected Packages(64 packages)

cluster-md-kmp-64kb

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

cluster-md-kmp-default

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dlm-kmp-64kb

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dlm-kmp-default

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-allwinner

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-altera

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-amazon

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-amd

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-amlogic

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

dtb-apm

openSUSE Leap 15.6

Fixed in:

6.4.0-150600.23.103.1

References

ADVISORY

https://bugzilla.suse.com/1264449

ADVISORY

https://bugzilla.suse.com/1264450

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046428.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-43284/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-43500/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261840-2/