The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3706-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues:

    The following security issues were fixed:

    - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284).
    - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in     COOKIE_ECHO processing       (bsc#1253437 bsc#1270023 bsc#1270024).
    - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
    - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
    - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
    - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
    - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
    - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
    - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
    - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
    - CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12 Security Update : kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3706-1)

high Nessus Plugin ID 339308

Version 1.2

Version 1.1

Version 1.2 Sep 23, 2026, 8:20 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202609230820
Version 1.1 Aug 25, 2026, 10:44 AM New Plugin Feed: 202608251044