Back Linuxsecurity SUSE Linux Enterprise 16 Important Kernel RT Security Update 2026-23260
Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×
## This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: * CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). * CVE-2026-46037: ipv4: icmp: validate type before using icmp_pointers (bsc#1267362). * CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). * CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). * CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). * CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). * CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
## This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: * CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). * CVE-2026-46037: ipv4: icmp: validate type before using icmp_pointers (bsc#1267362). * CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300). * CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281). * CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034). * CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). * CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
* CVE-2026-43109 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43109 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43109 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46037 ( SUSE ): 8.8
Announcement ID: SUSE-SU-2026:23260-1 Release Date: 2026-08-24T15:50:14Z Rating: important
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
