SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4892-1)

medium Nessus Plugin ID 371818

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4892-1 advisory.

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

- CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
- CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
- CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
- CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
- CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
- CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
- CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
- CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
- CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
- CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
- CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
- CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
- CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
- CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
- CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
- CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
- CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
- CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
- CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
- CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
- CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
- CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
- CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
- CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
- CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
- CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
- CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
- CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
- CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
- CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
- CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
- CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
- CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
- CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
- CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
- CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
- CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
- CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770).
- CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142).
- CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823).
- CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979).
- CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
- CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581).
- CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606).
- CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295).
- CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291).
- CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
- CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289).
- CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
- CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288).
- CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
- net: add inline function skb_csum_is_sctp (bsc#1285684).
- netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 371818

File Name: suse_SU-2026-4892-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 10/25/2026

Updated: 10/25/2026

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8

Percentile: 99.69

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-64012

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:novell:suse_linux:12, p-cpe:/a:novell:suse_linux:cluster-md-kmp-default, p-cpe:/a:novell:suse_linux:dlm-kmp-default, p-cpe:/a:novell:suse_linux:gfs2-kmp-default, p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:kernel-default-man, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-source, p-cpe:/a:novell:suse_linux:ocfs2-kmp-default

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/23/2026

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2022-50578, CVE-2023-54158, CVE-2023-54180, CVE-2025-68358, CVE-2026-43299, CVE-2026-63948, CVE-2026-63983, CVE-2026-64012, CVE-2026-64280, CVE-2026-64422, CVE-2026-64456, CVE-2026-64593, CVE-2026-68106, CVE-2026-68233, CVE-2026-68236, CVE-2026-68303, CVE-2026-68323, CVE-2026-68430, CVE-2026-72015, CVE-2026-72236, CVE-2026-72319, CVE-2026-72476, CVE-2026-72493, CVE-2026-74408, CVE-2026-74544, CVE-2026-74578, CVE-2026-74583, CVE-2026-74587, CVE-2026-74653, CVE-2026-74675, CVE-2026-80977, CVE-2026-89542, CVE-2026-89726, CVE-2026-89778, CVE-2026-89987, CVE-2026-90011, CVE-2026-90283, CVE-2026-93252, CVE-2026-93287, CVE-2026-93800, CVE-2026-93820, CVE-2026-93822, CVE-2026-97416, CVE-2026-97491, CVE-2026-98010, CVE-2026-98077, CVE-2026-98130, CVE-2026-98252, CVE-2026-98269, CVE-2026-98347, CVE-2026-98354, CVE-2026-98357, CVE-2026-98358, CVE-2026-98359, CVE-2026-98365, CVE-2026-99999

SuSE: SUSE-SU-2026:4892-1

Detections

Analytics