The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security
issues
The following security issues were fixed:
* CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources
in Zen2's op cache (bsc#1264013).
* CVE-2026-46300: net: skbuff: propagate shared-frag marker through
pskb_copy() (bsc#1265209).
* CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags
(bsc#1264449).
* CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags
are present (aka Dirty Frag) (bsc#1264450).
* CVE-2026-46333: ptrace: Logic bug in the Linux kernel's
__ptrace_may_access() function (bsc#1265308).
The following non security issues were fixed:
* io-wq: check that the predecessor is hashed in io_wq_remove_pending() (git-
fixes).
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch SUSE-2026-1899=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-1899=1
* openSUSE Leap 15.5 (noarch)
* kernel-source-rt-5.14.21-150500.13.137.1
* kernel-devel-rt-5.14.21-150500.13.137.1
* openSUSE Leap 15.5 (x86_64)
* kernel-rt-extra-5.14.21-150500.13.137.1
* kernel-rt_debug-debuginfo-5.14.21-150500.13.137.1
* kernel-rt-extra-debuginfo-5.14.21-150500.13.137.1
* kernel-rt_debug-debugsource-5.14.21-150500.13.137.1
* kernel-rt-livepatch-devel-5.14.21-150500.13.137.1
* kernel-rt_debug-devel-5.14.21-150500.13.137.1
* kselftests-kmp-rt-debuginfo-5.14.21-150500.13.137.1
* kernel-rt-debugsource-5.14.21-150500.13.137.1
* kernel-rt-optional-debuginfo-5.14.21-150500.13.137.1
* kernel-rt-optional-5.14.21-150500.13.137.1
* kernel-rt-vdso-debuginfo-5.14.21-150500.13.137.1
* dlm-kmp-rt-debuginfo-5.14.21-150500.13.137.1
* kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.137.1
* kernel-rt-devel-5.14.21-150500.13.137.1
* ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.137.1
* ocfs2-kmp-rt-5.14.21-150500.13.137.1
* kernel-rt-vdso-5.14.21-150500.13.137.1
* kernel-rt-livepatch-5.14.21-150500.13.137.1
*...
Read the Full Advisory* bsc#1264013
* bsc#1264449
* bsc#1264450
* bsc#1265209
* bsc#1265308
## References:
* https://www.suse.com/security/cve/CVE-2025-54518.html
* https://www.suse.com/security/cve/CVE-2026-43284.html
* https://www.suse.com/security/cve/CVE-2026-43500.html
* https://www.suse.com/security/cve/CVE-2026-46300.html
* https://www.suse.com/security/cve/CVE-2026-46333.html
* https://bugzilla.suse.com/show_bug.cgi?id=1264013
* https://bugzilla.suse.com/show_bug.cgi?id=1264449
* https://bugzilla.suse.com/show_bug.cgi?id=1264450
* https://bugzilla.suse.com/show_bug.cgi?id=1265209
* https://bugzilla.suse.com/show_bug.cgi?id=1265308
Get the latest Linux and open source security news straight to your inbox.