Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 539
Alerts This Week
Warning Icon 1 539

openSUSE Kernel Important Security Update Vuln 2026-3289-1

opensuse
Calendar Grey July 27, 2026
Scroller Opensuse
This security advisory highlights important updates for the openSUSE kernel, addressing five vulnerabilities. Follow installation instructions.
SUSE has released a security update addressing five vulnerabilities in the Linux kernel for multiple products, emphasizing the importance of installing the patch using recommended ...

Description

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes

various security issues:

The following security issues were fixed:

* CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx()

(bsc#1262404).

* CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create

(bsc#1264060).

* CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

(bsc#1271648).

* CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected

GFN (bsc#1266970).

* CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected

role (bsc#1270060).

Topics%20covered

Topics Covered

security advisory vulnerability patch important kernel OpenSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Live Patching 15-SP5

zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-3289=1 SUSE-SLE-

Module-Live-Patching-15-SP5-2026-3295=1 SUSE-SLE-Module-Live-

Patching-15-SP5-2026-3293=1 SUSE-SLE-Module-Live-Patching-15-SP5-2026-3287=1

SUSE-SLE-Module-Live-Patching-15-SP5-2026-3292=1 SUSE-SLE-Module-Live-

Patching-15-SP5-2026-3296=1 SUSE-SLE-Module-Live-Patching-15-SP5-2026-3294=1

SUSE-SLE-Module-Live-Patching-15-SP5-2026-3280=1 SUSE-SLE-Module-Live-

Patching-15-SP5-2026-3279=1 SUSE-SLE-Module-Live-Patching-15-SP5-2026-3288=1

SUSE-SLE-Module-Live-Patching-15-SP5-2026-3290=1

* openSUSE Leap 15.5

zypper in -t patch SUSE-2026-3289=1 SUSE-2026-3295=1 SUSE-2026-3293=1

SUSE-2026-3287=1 SUSE-2026-3292=1 SUSE-2026-3296=1 SUSE-2026-3294=1

SUSE-2026-3280=1 SUSE-2026-3279=1...

Read the Full Advisory

Package List

* openSUSE Leap 15.5 (ppc64le s390x x86_64)

* kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-5-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_33-debugsource-11-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_28-debugsource-21-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_34-debugsource-11-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_29-debugsource-19-150500.2.1

* kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-16-150500.2.1

* kernel-livepatch-5_14_21-150500_55_124-default-14-150500.2.1

* kernel-livepatch-5_14_21-150500_55_133-default-11-150500.2.1

* kernel-livepatch-5_14_21-150500_55_121-default-16-150500.2.1

* kernel-livepatch-5_14_21-150500_55_163-default-5-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_37-debugsource-7-150500.2.1

* kernel-livepatch-5_14_21-150500_55_110-default-22-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_30-debugsource-16-150500.2.1

* kernel-livepatch-SLE15-SP5_Update_31-debugsource-14-150500.2.1

*...

Read the Full Advisory

References

* bsc#1262404

* bsc#1264060

* bsc#1266970

* bsc#1270060

* bsc#1271648

## References:

* https://www.suse.com/security/cve/CVE-2026-23240.html

* https://www.suse.com/security/cve/CVE-2026-31738.html

* https://www.suse.com/security/cve/CVE-2026-43038.html

* https://www.suse.com/security/cve/CVE-2026-46113.html

* https://www.suse.com/security/cve/CVE-2026-53359.html

* https://bugzilla.suse.com/show_bug.cgi?id=1262404

* https://bugzilla.suse.com/show_bug.cgi?id=1264060

* https://bugzilla.suse.com/show_bug.cgi?id=1266970

* https://bugzilla.suse.com/show_bug.cgi?id=1270060

* https://bugzilla.suse.com/show_bug.cgi?id=1271648

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3289-1
Release Date: 2026-07-27T15:36:28Z

Topics%20covered

Topics Covered

security advisory vulnerability patch important kernel OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.