SUSE Kernel Important Security Update Advisory 2026-3595

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

## The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). * CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616). * CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). * CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727). * CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494). * CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435). * CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715). * CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks

## The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). * CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616). * CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). * CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727). * CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494). * CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435). * CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715). * CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks

Announcement ID: SUSE-SU-2026:3595-1 Release Date: 2026-08-12T11:33:42Z Rating: important

Get the latest Linux and open source security news straight to your inbox.