Back www.suse.com

Suse Su 20264968 1

www.suse.com • November 3, 2026

Share: View original

CVE-2026-63968 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVE-2026-63968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2026-63968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2026-64217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVE-2026-64217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-64217 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-68426 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-68426 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-72262 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-72262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-74669 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-74669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE Linux Enterprise Live Patching 15-SP7

SUSE Linux Enterprise Real Time 15 SP7

SUSE Linux Enterprise Server 15 SP7

SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves 11 vulnerabilities can now be installed.

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues:

The following security issues were fixed:

CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766).

CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272521).

CVE-2026-64217: netfs: Fix overrun check in netfs_extract_user_iter() (bsc#1272874).

CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274712).

CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277679).

CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693).

CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277399).

CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280760).

CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280728).

CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280285).

CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4967 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4968

SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-17-150700.2.1 kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-17-150700.2.1 kernel-livepatch-6_4_0-150700_7_25-rt-15-150700.2.1 kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-15-150700.2.1 kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-15-150700.2.1 kernel-livepatch-6_4_0-150700_7_19-rt-17-150700.2.1

kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-17-150700.2.1

kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-17-150700.2.1

kernel-livepatch-6_4_0-150700_7_25-rt-15-150700.2.1

kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-15-150700.2.1

kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-15-150700.2.1

kernel-livepatch-6_4_0-150700_7_19-rt-17-150700.2.1

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Affect SUSE Linux Systems SUSE has released updates addressing several vulnerabilities, including CVE-2026-89551, CVE-2026-98432, and CVE-2026-74469, which have CVSS scores of 9.8 and 8.8. These vulnerabilities affect various SUSE Linux Enterprise products and could allow remote code execution and denial of service attacks. The vulnerabilities were disclosed between July and October 2026, with the first public proof-of-concept for CVE-2026-98432 appearing on October 29, 2026. Administrators are urged to apply the patches immediately to mitigate potential exploitation. The updates are available for SUSE Linux Enterprise Server and related products. The vulnerabilities are considered high risk due to their potential impact and the existence of public exploits. Current status indicates that exploitation in the wild has not been confirmed, but proof-of-concept code is available for some vulnerabilities. 71

Extracted Entities

CVEs (11)

CVE-2026-53016 CVE-2026-63968 CVE-2026-64217 CVE-2026-68426 CVE-2026-72262 CVE-2026-74469 CVE-2026-74669 CVE-2026-89544 CVE-2026-89551 CVE-2026-89674 CVE-2026-98432

Platforms (4)

SUSE Linux Enterprise Live Patching 15-sp7 SUSE Linux Enterprise Real Time 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server For SAP Applications 15 SP7