Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

SUSE-SU-2026:1978-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2026:1978-1

SUSE-SU-2026:1978-1

HIGH8.8

Security update for the Linux Kernel

Published May 18, 2026

Modified 2 weeks ago

Fix available

Details

Description of the patch:

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013).
CVE-2026-46300: net: skbuff: propagate shared-frag marker through pskb_copy() (bsc#1265209).
CVE-2026-46333: ptrace: Logic bug in the Linux kernel's __ptrace_may_access() function (bsc#1265308).

Affected Packages(23 packages)

cluster-md-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.52.1

dlm-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.52.1

gfs2-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.52.1

ocfs2-kmp-default

SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

6.4.0-150700.53.52.1

kernel-default-livepatch

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

6.4.0-150700.53.52.1

kernel-default-livepatch-devel

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

6.4.0-150700.53.52.1

kernel-livepatch-6_4_0-150700_53_52-default

SUSE Linux Enterprise Live Patching 15 SP7

Fixed in:

1-150700.15.7.1

kernel-64kb

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

6.4.0-150700.53.52.1

kernel-64kb-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

6.4.0-150700.53.52.1

kernel-default

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

6.4.0-150700.53.52.1

References

https://bugzilla.suse.com/1264013

https://bugzilla.suse.com/1265209

https://bugzilla.suse.com/1265308

https://lists.suse.com/pipermail/sle-updates/2026-May/046568.html

https://www.suse.com/security/cve/CVE-2025-54518/

https://www.suse.com/security/cve/CVE-2026-46300/

https://www.suse.com/security/cve/CVE-2026-46333/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2026/suse-su-20261978-1/

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Upstream

CVE-2025-54518 CVE-2026-46300 CVE-2026-46333

Ecosystems(7)

SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7

Timeline

PublishedMay 18, 2026

ModifiedMay 18, 2026