{"id":"SUSE-SU-2026:3809-1","summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).\n- CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).\n- CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).\n- CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).\n- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).\n- CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).\n- CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).\n- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).\n- CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).\n- CVE-2026-63922: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).\n- CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 (bsc#1273742).\n- CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).\n\nThe following non security issues were fixed:\n\n- scripts/cve_tools/kpm-bot: quote branch pattern properly.\n- sctp: validate embedded address parameter length (git-fixes).\n","modified":"2026-08-31T18:23:14.856454311Z","published":"2026-08-26T10:44:29Z","related":["CVE-2023-53995","CVE-2026-23204","CVE-2026-52986","CVE-2026-53131","CVE-2026-53196","CVE-2026-53224","CVE-2026-53246","CVE-2026-53256","CVE-2026-53359","CVE-2026-63806","CVE-2026-63922","CVE-2026-63924","CVE-2026-64114","CVE-2026-64564"],"upstream":["CVE-2023-53995","CVE-2026-23204","CVE-2026-52986","CVE-2026-53131","CVE-2026-53196","CVE-2026-53224","CVE-2026-53246","CVE-2026-53256","CVE-2026-53359","CVE-2026-63806","CVE-2026-63922","CVE-2026-63924","CVE-2026-64114","CVE-2026-64564"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263809-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1255616"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258340"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269289"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269773"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269986"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269988"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269993"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269997"},{"type":"REPORT","url":"https://bugzilla.suse.com/1270059"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272268"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272855"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273742"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274072"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-53995"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23204"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-52986"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53131"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53196"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53224"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53246"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53256"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-63806"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-63922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-63924"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64114"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64564"}],"affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-ec2-devel":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-docs":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-ec2":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-docs","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-ec2-devel":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-ec2":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-docs":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-ec2","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-docs":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-ec2-devel":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-ec2":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-docs":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-ec2":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-ec2-devel":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-xen":"3.0.101-108.216.1","kernel-ec2-devel":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-ec2":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-docs":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-trace","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-ec2":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1","kernel-ec2-devel":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-docs":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}},{"package":{"name":"kernel-xen","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.216.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-ec2":"3.0.101-108.216.1","kernel-default-base":"3.0.101-108.216.1","kernel-docs":"3.0.101-108.216.1","kernel-source":"3.0.101-108.216.1","kernel-ec2-base":"3.0.101-108.216.1","kernel-default-devel":"3.0.101-108.216.1","kernel-ec2-devel":"3.0.101-108.216.1","kernel-xen-base":"3.0.101-108.216.1","kernel-xen-devel":"3.0.101-108.216.1","kernel-trace-base":"3.0.101-108.216.1","kernel-trace-devel":"3.0.101-108.216.1","kernel-xen":"3.0.101-108.216.1","kernel-syms":"3.0.101-108.216.1","kernel-default":"3.0.101-108.216.1","kernel-trace":"3.0.101-108.216.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3809-1.json"}}],"schema_version":"1.9.0"}