Skip to content
SUSE Kernel RT Important Security Update 2026-23258

SUSE Kernel RT Important Security Update 2026-23258

Linuxsecurity •LinuxSecurity Advisories • August 26, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

## This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: * CVE-2026-46037: ipv4: icmp: validate type before using icmp_pointers (bsc#1267362). * CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). * CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). * CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). * CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). * CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196). * CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).

## This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: * CVE-2026-46037: ipv4: icmp: validate type before using icmp_pointers (bsc#1267362). * CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). * CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). * CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). * CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). * CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196). * CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).

* CVE-2026-46037 ( SUSE ): 8.8

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-46037 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

* CVE-2026-46037 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

* CVE-2026-46242 ( SUSE ): 8.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Announcement ID: SUSE-SU-2026:23258-1 Release Date: 2026-08-24T15:50:14Z Rating: important

Get the latest Linux and open source security news straight to your inbox.