Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
An update that solves six vulnerabilities and has one fix can now be installed.. # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:22472-1 Release Date: 2026-06-24T09:48:24Z Rating: important References: * bsc#1260907 * bsc#1261640 * bsc#1263088 * bsc#1263902 * bsc#1266229 * bsc#1267625 * bsc#1268282 Cross-References: * CVE-2026-23278 * CVE-2026-31402 * CVE-2026-31504 * CVE-2026-31694 * CVE-2026-43503 * CVE-2026-46323 CVSS scores: * CVE-2026-23278 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23278 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23278 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31402 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-31402 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-31402 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31504 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31504 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31694 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31694 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31694 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43503 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43503 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43503 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43503 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-46323 ( SUSE ): 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves six vulnerabilities and has one fix can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: * CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). * CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). * CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088). * CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902). * CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). * CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282). * net/sched: fix pedit partial COW leading to page cache (bsc#1267625). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-487=1 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-12-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23278.html * https://www.suse.com/security/cve/CVE-2026-31402.html * https://www.suse.com/security/cve/CVE-2026-31504.html * https://www.suse.com/security/cve/CVE-2026-31694.html * https://www.suse.com/security/cve/CVE-2026-43503.html * https://www.suse.com/security/cve/CVE-2026-46323.html * https://bugzilla.suse.com/show_bug.cgi?id=1260907 *https://bugzilla.suse.com/show_bug.cgi?id=1261640 * https://bugzilla.suse.com/show_bug.cgi?id=1263088 * https://bugzilla.suse.com/show_bug.cgi?id=1263902 * https://bugzilla.suse.com/show_bug.cgi?id=1266229 * https://bugzilla.suse.com/show_bug.cgi?id=1267625 * https://bugzilla.suse.com/show_bug.cgi?id=1268282 . Critical security update resolves multiple issues in SUSE Linux kernel for Micro 6.0. Stay protected with this patch.. SUSE Linux updates, kernel security, Linux patches, important security fixes. . Severity: Important. LinuxSecurity.com Team
The 6.19.14-107 update contains a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-32ae3b7199 2026-05-21 03:17:14.913959+00:00 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 42 Version : 6.19.14 Release : 107.fc42 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 6.19.14-107 update contains a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability. -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Justin M. Forbes [6.19.14-107] - Revert "redhat/kernel.spec.template: Fix indentation of uki-virt generation code" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Simplify uki-virt signing" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Add kernel-uki-dtbloader sub-package" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r" (Justin M. Forbes) * Tue May 19 2026 Justin M. Forbes [6.19.14-7] - net: gro: don't copy frags between mixed zcopy skbs (Sabrina Dubroca) - Turn on auto bumping for remainder of F42 (Justin M. Forbes) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2479833 - kernel: Linux kernel: SKBFL_SHARED_FRAG page-cache corruption PoC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2479833 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-32ae3b7199' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
The 7.0.9-104/204 kernels contain a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability as well as some mitigations for PinTheft. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3f85a4eba7 2026-05-21 01:26:51.960484+00:00 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 43 Version : 7.0.9 Release : 104.fc43 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 7.0.9-104/204 kernels contain a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability as well as some mitigations for PinTheft -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Justin M. Forbes [7.0.9-4] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells) - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells) - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells) * Tue May 19 2026 Justin M. Forbes [7.0.9-3] - net: gro: don't copy frags between mixed zcopy skbs (Sabrina Dubroca) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2479833 - kernel: Linux kernel: SKBFL_SHARED_FRAG page-cache corruption PoC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2479833 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3f85a4eba7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed withthe Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2019:2808-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2808 Issue date: 2019-09-17 CVE Names: CVE-2019-5489 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server (v. 5 ELS) - i386, noarch, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: page cache side channel attacks (CVE-2019-5489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1664110 - CVE-2019-5489 Kernel: page cache side channel attacks 6. Package List: Red Hat Enterprise Linux Server (v. 5ELS): Source: kernel-2.6.18-439.el5.src.rpm i386: kernel-2.6.18-439.el5.i686.rpm kernel-PAE-2.6.18-439.el5.i686.rpm kernel-PAE-debuginfo-2.6.18-439.el5.i686.rpm kernel-PAE-devel-2.6.18-439.el5.i686.rpm kernel-debug-2.6.18-439.el5.i686.rpm kernel-debug-debuginfo-2.6.18-439.el5.i686.rpm kernel-debug-devel-2.6.18-439.el5.i686.rpm kernel-debuginfo-2.6.18-439.el5.i686.rpm kernel-debuginfo-common-2.6.18-439.el5.i686.rpm kernel-devel-2.6.18-439.el5.i686.rpm kernel-headers-2.6.18-439.el5.i386.rpm kernel-xen-2.6.18-439.el5.i686.rpm kernel-xen-debuginfo-2.6.18-439.el5.i686.rpm kernel-xen-devel-2.6.18-439.el5.i686.rpm noarch: kernel-doc-2.6.18-439.el5.noarch.rpm s390x: kernel-2.6.18-439.el5.s390x.rpm kernel-debug-2.6.18-439.el5.s390x.rpm kernel-debug-debuginfo-2.6.18-439.el5.s390x.rpm kernel-debug-devel-2.6.18-439.el5.s390x.rpm kernel-debuginfo-2.6.18-439.el5.s390x.rpm kernel-debuginfo-common-2.6.18-439.el5.s390x.rpm kernel-devel-2.6.18-439.el5.s390x.rpm kernel-headers-2.6.18-439.el5.s390x.rpm kernel-kdump-2.6.18-439.el5.s390x.rpm kernel-kdump-debuginfo-2.6.18-439.el5.s390x.rpm kernel-kdump-devel-2.6.18-439.el5.s390x.rpm x86_64: kernel-2.6.18-439.el5.x86_64.rpm kernel-debug-2.6.18-439.el5.x86_64.rpm kernel-debug-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-debug-devel-2.6.18-439.el5.x86_64.rpm kernel-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-debuginfo-common-2.6.18-439.el5.x86_64.rpm kernel-devel-2.6.18-439.el5.x86_64.rpm kernel-headers-2.6.18-439.el5.x86_64.rpm kernel-xen-2.6.18-439.el5.x86_64.rpm kernel-xen-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-xen-devel-2.6.18-439.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-5489 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXYMQCNzjgjWX9erEAQgRjhAAmv0xpiDhew4eUoDNnw0jGoCivTvPabf+ 9nqyjJ6GMbyGjoIo3w+jomxjoDtp4Zis8tkTuwfXbbmxCt1YwXKd85g6or7T2uRG xbi54GCz1Xl+kOVYvzBnk01As7fHfm9tcF0TL6ZTwOv8ciGCV/Y9rpaRbwKV15t6 l+zsjFt0S4YjFSD4xMIxGWJxqZOUTzIQRQ7zqnRfXkq8hnNGrO9AnMuJfDdfvS8G 2ra7hMzb0ZWbrQEDmuJgBjXi1mNXXMZdbejsDn2SyifDHQethtmTH/FFvvCNYRP9 OthMbFMeQFn+q9t2bctDEtfeW5grfDLHAFsrdqpNZkAqDcQmxyZhmf2kSJOoS2iO nsl3scYqOwFdEcI2va8EoVv6ziEGoP3VCelRR67kl8kAqygkbtJx+oiQpYBUjVuw y2BEhHATFml8VfWnoP1kXEM4wrb2yxC5EqOti8/YBZCSCuE4xYsezHbrejTxwEbA 7pPvZuXJF+1uYYu1UEyY4O4/7+kqloPHNdrP123S8RV1Ugxp+9T4wIhmFQLm7fhp LuXwKLGMiSe3kcxrmo5wmpmnTKMVh1vBsiEmwo6kQlTp49dEULs+rzfcdQauqUvz VDCassS4piF1GdNt1PRcaGm/yydIsMmvwOg95qmhPGh0x4iyQpV34KAj0SD9TSUT nX3Gl2+ZMgk=d0D/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.