SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0617-1)

medium Nessus Plugin ID 300092

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0617-1 advisory.

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

- CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
- CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
- CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
- CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
- CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
- CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
- CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
- CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
- CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
- CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
- CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
- CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
- CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
- CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
- CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
- CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
- CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
- CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
- CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).

The following non security issues were fixed:

- net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- x86/CPU/AMD: Add ZenX generations flags (bsc#1238896).
- x86/its: Fix crash during dynamic its initialization (bsc#1257771).
- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- x86: make page fault handling disable interrupts properly (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 300092

File Name: suse_SU-2026-0617-1.nasl

Version: 1.1

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 2/28/2026

Updated: 2/28/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.6

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2022-0854

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

CVSS Score Source: CVE-2025-38565

CVSS v4

Risk Factor: Medium

Base Score: 5.7

Threat Score: 5.7

Threat Vector: CVSS:4.0/E:A

Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2024-28956

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:reiserfs-kmp-default, p-cpe:/a:novell:suse_linux:kernel-macros, p-cpe:/a:novell:suse_linux:kernel-zfcpdump, p-cpe:/a:novell:suse_linux:kernel-64kb-devel, p-cpe:/a:novell:suse_linux:cluster-md-kmp-default, p-cpe:/a:novell:suse_linux:gfs2-kmp-default, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-default-devel, p-cpe:/a:novell:suse_linux:kernel-devel, p-cpe:/a:novell:suse_linux:kernel-obs-build, p-cpe:/a:novell:suse_linux:kernel-syms, p-cpe:/a:novell:suse_linux:ocfs2-kmp-default, p-cpe:/a:novell:suse_linux:dlm-kmp-default, p-cpe:/a:novell:suse_linux:kernel-source, p-cpe:/a:novell:suse_linux:kernel-64kb, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/24/2026

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2022-0854, CVE-2022-48853, CVE-2022-49604, CVE-2022-49943, CVE-2022-49980, CVE-2022-50232, CVE-2022-50614, CVE-2022-50615, CVE-2022-50617, CVE-2022-50618, CVE-2022-50619, CVE-2022-50622, CVE-2022-50623, CVE-2022-50625, CVE-2022-50626, CVE-2022-50629, CVE-2022-50630, CVE-2022-50633, CVE-2022-50635, CVE-2022-50636, CVE-2022-50638, CVE-2022-50640, CVE-2022-50641, CVE-2022-50643, CVE-2022-50644, CVE-2022-50646, CVE-2022-50649, CVE-2022-50652, CVE-2022-50653, CVE-2022-50656, CVE-2022-50658, CVE-2022-50660, CVE-2022-50661, CVE-2022-50662, CVE-2022-50664, CVE-2022-50666, CVE-2022-50668, CVE-2022-50669, CVE-2022-50670, CVE-2022-50671, CVE-2022-50672, CVE-2022-50673, CVE-2022-50675, CVE-2022-50677, CVE-2022-50678, CVE-2022-50679, CVE-2022-50697, CVE-2022-50698, CVE-2022-50699, CVE-2022-50700, CVE-2022-50702, CVE-2022-50703, CVE-2022-50704, CVE-2022-50709, CVE-2022-50715, CVE-2022-50716, CVE-2022-50717, CVE-2022-50718, CVE-2022-50719, CVE-2022-50722, CVE-2022-50724, CVE-2022-50726, CVE-2022-50727, CVE-2022-50728, CVE-2022-50730, CVE-2022-50731, CVE-2022-50732, CVE-2022-50733, CVE-2022-50735, CVE-2022-50736, CVE-2022-50740, CVE-2022-50742, CVE-2022-50744, CVE-2022-50745, CVE-2022-50747, CVE-2022-50749, CVE-2022-50750, CVE-2022-50751, CVE-2022-50752, CVE-2022-50754, CVE-2022-50755, CVE-2022-50756, CVE-2022-50757, CVE-2022-50758, CVE-2022-50760, CVE-2022-50761, CVE-2022-50763, CVE-2022-50767, CVE-2022-50769, CVE-2022-50770, CVE-2022-50773, CVE-2022-50774, CVE-2022-50776, CVE-2022-50777, CVE-2022-50779, CVE-2022-50781, CVE-2022-50782, CVE-2022-50809, CVE-2022-50814, CVE-2022-50819, CVE-2022-50821, CVE-2022-50822, CVE-2022-50823, CVE-2022-50824, CVE-2022-50826, CVE-2022-50827, CVE-2022-50828, CVE-2022-50829, CVE-2022-50830, CVE-2022-50832, CVE-2022-50834, CVE-2022-50835, CVE-2022-50836, CVE-2022-50839, CVE-2022-50840, CVE-2022-50842, CVE-2022-50843, CVE-2022-50844, CVE-2022-50845, CVE-2022-50846, CVE-2022-50848, CVE-2022-50849, CVE-2022-50850, CVE-2022-50851, CVE-2022-50853, CVE-2022-50856, CVE-2022-50858, CVE-2022-50859, CVE-2022-50860, CVE-2022-50861, CVE-2022-50864, CVE-2022-50866, CVE-2022-50868, CVE-2022-50870, CVE-2022-50872, CVE-2022-50876, CVE-2022-50878, CVE-2022-50880, CVE-2022-50881, CVE-2022-50882, CVE-2022-50884, CVE-2022-50885, CVE-2022-50886, CVE-2022-50887, CVE-2022-50888, CVE-2022-50889, CVE-2023-23559, CVE-2023-52433, CVE-2023-52923, CVE-2023-53178, CVE-2023-53215, CVE-2023-53254, CVE-2023-53407, CVE-2023-53412, CVE-2023-53417, CVE-2023-53418, CVE-2023-53743, CVE-2023-53744, CVE-2023-53746, CVE-2023-53747, CVE-2023-53751, CVE-2023-53754, CVE-2023-53755, CVE-2023-53761, CVE-2023-53766, CVE-2023-53781, CVE-2023-53783, CVE-2023-53786, CVE-2023-53788, CVE-2023-53792, CVE-2023-53794, CVE-2023-53802, CVE-2023-53803, CVE-2023-53804, CVE-2023-53808, CVE-2023-53811, CVE-2023-53814, CVE-2023-53818, CVE-2023-53819, CVE-2023-53820, CVE-2023-53827, CVE-2023-53830, CVE-2023-53832, CVE-2023-53834, CVE-2023-53837, CVE-2023-53840, CVE-2023-53842, CVE-2023-53844, CVE-2023-53845, CVE-2023-53847, CVE-2023-53850, CVE-2023-53852, CVE-2023-53858, CVE-2023-53862, CVE-2023-53866, CVE-2023-53990, CVE-2023-53991, CVE-2023-53996, CVE-2023-53998, CVE-2023-54001, CVE-2023-54003, CVE-2023-54007, CVE-2023-54009, CVE-2023-54010, CVE-2023-54014, CVE-2023-54015, CVE-2023-54018, CVE-2023-54019, CVE-2023-54020, CVE-2023-54021, CVE-2023-54024, CVE-2023-54025, CVE-2023-54026, CVE-2023-54028, CVE-2023-54036, CVE-2023-54039, CVE-2023-54040, CVE-2023-54042, CVE-2023-54045, CVE-2023-54046, CVE-2023-54048, CVE-2023-54049, CVE-2023-54050, CVE-2023-54051, CVE-2023-54053, CVE-2023-54055, CVE-2023-54058, CVE-2023-54064, CVE-2023-54072, CVE-2023-54076, CVE-2023-54078, CVE-2023-54079, CVE-2023-54083, CVE-2023-54084, CVE-2023-54090, CVE-2023-54091, CVE-2023-54092, CVE-2023-54095, CVE-2023-54096, CVE-2023-54097, CVE-2023-54098, CVE-2023-54100, CVE-2023-54102, CVE-2023-54104, CVE-2023-54108, CVE-2023-54110, CVE-2023-54111, CVE-2023-54115, CVE-2023-54118, CVE-2023-54119, CVE-2023-54120, CVE-2023-54122, CVE-2023-54123, CVE-2023-54126, CVE-2023-54127, CVE-2023-54130, CVE-2023-54131, CVE-2023-54136, CVE-2023-54140, CVE-2023-54142, CVE-2023-54146, CVE-2023-54150, CVE-2023-54153, CVE-2023-54156, CVE-2023-54159, CVE-2023-54166, CVE-2023-54168, CVE-2023-54170, CVE-2023-54171, CVE-2023-54173, CVE-2023-54177, CVE-2023-54179, CVE-2023-54183, CVE-2023-54186, CVE-2023-54189, CVE-2023-54190, CVE-2023-54197, CVE-2023-54198, CVE-2023-54199, CVE-2023-54201, CVE-2023-54202, CVE-2023-54205, CVE-2023-54208, CVE-2023-54211, CVE-2023-54213, CVE-2023-54214, CVE-2023-54219, CVE-2023-54230, CVE-2023-54236, CVE-2023-54242, CVE-2023-54243, CVE-2023-54244, CVE-2023-54245, CVE-2023-54252, CVE-2023-54260, CVE-2023-54264, CVE-2023-54266, CVE-2023-54269, CVE-2023-54270, CVE-2023-54271, CVE-2023-54274, CVE-2023-54275, CVE-2023-54277, CVE-2023-54280, CVE-2023-54284, CVE-2023-54286, CVE-2023-54287, CVE-2023-54289, CVE-2023-54292, CVE-2023-54293, CVE-2023-54294, CVE-2023-54295, CVE-2023-54298, CVE-2023-54299, CVE-2023-54300, CVE-2023-54301, CVE-2023-54302, CVE-2023-54304, CVE-2023-54305, CVE-2023-54309, CVE-2023-54311, CVE-2023-54315, CVE-2023-54317, CVE-2023-54319, CVE-2023-54321, CVE-2023-54325, CVE-2023-54326, CVE-2024-26581, CVE-2024-26832, CVE-2024-28956, CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357, CVE-2024-44987, CVE-2024-46854, CVE-2024-50143, CVE-2024-54031, CVE-2025-21658, CVE-2025-21738, CVE-2025-21760, CVE-2025-21764, CVE-2025-21765, CVE-2025-21766, CVE-2025-38068, CVE-2025-38129, CVE-2025-38159, CVE-2025-38375, CVE-2025-38563, CVE-2025-38565, CVE-2025-38684, CVE-2025-39977, CVE-2025-40019, CVE-2025-40044, CVE-2025-40139, CVE-2025-40215, CVE-2025-40220, CVE-2025-40233, CVE-2025-40256, CVE-2025-40257, CVE-2025-40258, CVE-2025-40277, CVE-2025-40280, CVE-2025-40300, CVE-2025-40331, CVE-2025-68183, CVE-2025-68284, CVE-2025-68285, CVE-2025-68312, CVE-2025-68732, CVE-2025-68813, CVE-2025-71085, CVE-2025-71089, CVE-2025-71112, CVE-2025-71116, CVE-2025-71120, CVE-2026-22999, CVE-2026-23001, CVE-2026-23074, CVE-2026-23089

SuSE: SUSE-SU-2026:0617-1

Detections

Analytics