SUSE-SU-2026:2601-1

Details

Description of the patch:

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues

The following security issues were fixed:

CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).

Affected Packages

kernel-livepatch-5_14_21-150400_24_179-default

SUSE Linux Enterprise Live Patching 15 SP4

Fixed in:

13-150400.2.1

kernel-livepatch-5_14_21-150500_55_149-default

SUSE Linux Enterprise Live Patching 15 SP5

Fixed in:

4-150500.2.1

References