Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

SUSE 15-SP7 Kea Important Buffer Overflow Vuln 2026-1378-1

suse
Calendar Grey April 16, 2026
Dist Suse Esm H88
Update resolves a critical issue in kea, addressing a buffer overflow vulnerability affecting SUSE systems.
An update that solves one vulnerability can now be installed.

Summary

## This update for kea fixes the following issues: Update to release 2.6.5: * A large number of bracket pairs in a JSON payload directed to any endpoint would result in a stack overflow, due to recursive calls when parsing the JSON. This has been fixed. (CVE-2026-3608) [bsc#1260380] * A null dereference is now no longer possible when configuring the Control Agent with a socket that lacks the mandatory socket-name entry. * UNIX sockets are now created as group-writable. * Corrected an issue in logging configuration when parsing "syslog:" * Earlier Kea versions could crash when handling misconfigured global reservations. This has been fixed. * Support for recent versions of Sphinx has been added. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like

Topics%20covered

Topics Covered

security advisory update buffer overflow SuSE important kea

References

* bsc#1260380

Cross-

* CVE-2026-3608

CVSS scores:

* CVE-2026-3608 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-3608 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-3608 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2026-3608.html

* https://bugzilla.suse.com/show_bug.cgi?id=1260380

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:1378-1
Release Date: 2026-04-16T07:19:46Z
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow SuSE important kea

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here