{"id":"SUSE-SU-2026:4190-1","summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).\n- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).\n- CVE-2026-53059: dm mirror log: clear log bits up to BITS_PER_LONG boundary (bsc#1269655).\n- CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).\n- CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).\n- CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n","modified":"2026-09-16T10:00:04.136886919Z","published":"2026-09-15T12:34:16Z","related":["CVE-2026-46116","CVE-2026-52955","CVE-2026-53059","CVE-2026-53163","CVE-2026-63887","CVE-2026-68121","CVE-2026-68202","CVE-2026-72389","CVE-2026-80580"],"upstream":["CVE-2026-46116","CVE-2026-52955","CVE-2026-53059","CVE-2026-53163","CVE-2026-63887","CVE-2026-68121","CVE-2026-68202","CVE-2026-72389","CVE-2026-80580"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264190-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1267369"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269159"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269306"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269655"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272385"},{"type":"REPORT","url":"https://bugzilla.suse.com/1273869"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274888"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275161"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278294"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-46116"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-52955"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53059"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-53163"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-63887"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68121"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68202"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-72389"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-80580"}],"affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-trace":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1","kernel-xen":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-docs","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-trace-base":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-xen":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-ec2","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-syms":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-xen":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-xen":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-xen":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-trace","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-xen":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-trace-devel":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}},{"package":{"name":"kernel-xen","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purl":"pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.220.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-trace-devel":"3.0.101-108.220.1","kernel-docs":"3.0.101-108.220.1","kernel-source":"3.0.101-108.220.1","kernel-default":"3.0.101-108.220.1","kernel-xen-base":"3.0.101-108.220.1","kernel-xen-devel":"3.0.101-108.220.1","kernel-ec2-devel":"3.0.101-108.220.1","kernel-trace":"3.0.101-108.220.1","kernel-ec2":"3.0.101-108.220.1","kernel-default-devel":"3.0.101-108.220.1","kernel-default-base":"3.0.101-108.220.1","kernel-trace-base":"3.0.101-108.220.1","kernel-syms":"3.0.101-108.220.1","kernel-xen":"3.0.101-108.220.1","kernel-ec2-base":"3.0.101-108.220.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4190-1.json"}}],"schema_version":"1.9.0"}