The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3717-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues:

    The following security issues were fixed:

    - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284).
    - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in     COOKIE_ECHO processing       (bsc#1253437 bsc#1270023 bsc#1270024).
    - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
    - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
    - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
    - CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
    - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
    - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3717-1)

medium Nessus Plugin ID 339751

Version 1.2