CVE-2023-53995 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVE-2023-53995 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2026-52956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-52956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVE-2026-53224 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVE-2026-53224 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2026-53224 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVE-2026-53246 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
CVE-2026-53246 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVE-2026-53246 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2026-64600 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVE-2026-64600 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVE-2026-64600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise Live Patching 15-SP4
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Micro 5.4
SUSE Linux Enterprise Real Time 15 SP4
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP4
An update that solves five vulnerabilities can now be installed.
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues:
The following security issues were fixed:
CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284).
CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1253437 bsc#1270023 bsc#1270024).
CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:
SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-3829=1
openSUSE Leap 15.4 zypper in -t patch SUSE-2026-3829=1
openSUSE Leap 15.4 (ppc64le s390x x86_64) kernel-livepatch-SLE15-SP4_Update_57-debugsource-2-150400.2.1 kernel-livepatch-5_14_21-150400_24_228-default-2-150400.2.1 kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-2-150400.2.1
kernel-livepatch-SLE15-SP4_Update_57-debugsource-2-150400.2.1
kernel-livepatch-5_14_21-150400_24_228-default-2-150400.2.1
kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-2-150400.2.1
SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) kernel-livepatch-SLE15-SP4_Update_57-debugsource-2-150400.2.1 kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-2-150400.2.1 kernel-livepatch-5_14_21-150400_24_228-default-2-150400.2.1
kernel-livepatch-SLE15-SP4_Update_57-debugsource-2-150400.2.1
kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-2-150400.2.1
kernel-livepatch-5_14_21-150400_24_228-default-2-150400.2.1
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
