The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3766-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues:

    The following security issues were fixed:

    - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284).
    - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in     COOKIE_ECHO processing       (bsc#1253437 bsc#1270023 bsc#1270024).
    - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
    - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
    - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
    - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
    - CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
    - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
    - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
    - CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
    - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
    - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
    - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
    - CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
    - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3766-1)

high Nessus Plugin ID 341031

Version 1.2

Version 1.1

Version 1.2 Sep 23, 2026, 8:20 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202609230820
Version 1.1 Aug 27, 2026, 10:23 AM New Plugin Feed: 202608271023